Skip to content

CVE-2017-9623 Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data.

MediumCVSS 6.1 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data.

Affected products

ProductAffected versionsFixed in
epesi <= 1.8.2 No fix listed

References

  • github.com issue-tracking patch third-party-advisory
  • github.com exploit issue-tracking patch third-party-advisory