CVE-2017-7953

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields2017-05-17 · webapps · xml

Impact

INFOR EAM V11.0 Build 201410 has XSS via comment fields.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://seclists.org/fulldisclosure/2017/May/54
• https://www.exploit-db.com/exploits/42029/
• http://seclists.org/fulldisclosure/2017/May/54
• https://www.exploit-db.com/exploits/42029/