Skip to content

CVE-2017-9546 admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.

MediumCVSS 5.7 EPSS 1.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.

Affected products

ProductAffected versionsFixed in
bigtreecms bigtree cms <= 4.2.18 No fix listed

References

  • github.com issue-tracking patch third-party-advisory