CVE-2017-17889

Description

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-9036

https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS