CVE-2017-8302 Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/view...
MediumCVSS 5.4
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/views/cusers/inc/dsp_search_form.cfm, admin/core/views/cusers/inc/dsp_users_list.cfm, admin/core/views/cusers/list.cfm, and admin/core/views/cusers/listusers.cfm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blueriver muracms | = 7.0.6967 | No fix listed |
References
- github.com patch third-party-advisory
- github.com exploit third-party-advisory