Security Advisory

CVE-2017-16904

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-11-20 19:00:00

Last updated 2024-08-05 20:35:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator.

← Browse all CVEs View on cve.org ↗