medium6.1
CVE-2017-10711
In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.
Impact
In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplerisk | Simplerisk | Version 20170614-001 |