medium5.4
CVE-2017-1000478
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial …
Impact
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elabftw | Elabftw | Version 1.7.8 |