CVE-2017-9516
1 advisory.
Packagist/craftcms/cms CVE-2017-9516: medium 5.4, EPSS 2.80%
Craft CMS XSS Vulnerability
Action: Upgrade craftcms/cms to 2.6.2982 or later.
composer require craftcms/cms:2.6.2982Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.2982 | - |
Fixed versions
| 2.6.2982 |
Sources
- osv: GHSA-6pvw-hh48-jx7p
- https://nvd.nist.gov/vuln/detail/CVE-2017-9516
- https://craftcms.com/changelog#2-6-2982
- https://github.com/craftcms/cms
- https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.html
- https://twitter.com/CraftCMS/status/872599894912937984
- https://www.exploit-db.com/exploits/42143
CVE-2017-9516 · published · modified · JSON