medium6.1
CVE-2017-12798
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.
Impact
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexusphp Project | Nexusphp | Version 1.5 |