CVE-2017-15213

Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or…

published October 10, 2017

CVSS
—
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or email_address field to themes/CleanFS/templates/common.editallusers.tpl.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Published
2017-10-10T05:00Z
EPSS history
Timeline
  • 10 OCT 05:00Z
    Stored XSS vulnerability in Flyspray before 1.0-rc6 allows an authenticated user to inject JavaScript to gain administrator privileges, via the real_name or…
    cvelistv5