medium6.1
CVE-2017-12856
Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php.
Impact
Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| C.P.Sub Project | C.P.Sub | Version 5.2 |