CVE-2017-1000160

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection

published November 17, 2017

CVSS
—
EPSS
1%
Percentile
42.7
In the wild
Unconfirmed
What it is

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00511 · 42.7th percentile
Published
2017-11-17T05:00Z
EPSS history
Timeline
  • 17 NOV 05:00Z
    EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection
    cvelistv5