medium5.4
CVE-2017-17889
Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description withi…
Impact
Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kliqqi | Kliqqi Cms | Version 3.5.2 |