medium6.1
CVE-2017-6480
groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter).
Impact
groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Groovel Project | Cmsgroovel | through 3.3.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96585
- https://github.com/groovel/cmsgroovel/issues/2
- https://github.com/groovel/cmsgroovel/releases/tag/3.3.7-beta
- http://www.securityfocus.com/bid/96585
- https://github.com/groovel/cmsgroovel/issues/2
- https://github.com/groovel/cmsgroovel/releases/tag/3.3.7-beta