medium6.1
CVE-2017-14347
NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.
Impact
NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nexusphp Project | Nexusphp | Version 1.5 |