medium6.1
CVE-2017-7944
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.
Impact
XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xoops | Xoops | Version 2.5.8.1 |