CVE-2017-7998 Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin pa...
MediumCVSS 6.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin panel or (2) username parameter to webapp/users/user_reg.jsp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gespage | < 7.4.9 | 7.4.9 |
References
- 20180105 [CVE-2017-7998] Gespage stored cross-site-scripting (XSS) vulnerability mailing-list third-party-advisory
- sysdream.com exploit third-party-advisory