medium4.8
CVE-2017-15948
Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field.
Impact
Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Grabaperch | Perch | Version 3.0.3 |