Security Advisory

CVE-2017-1000428

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-01-10 02:00:00

Last updated 2024-09-17 04:14:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string.

← Browse all CVEs View on cve.org ↗