CVE-2017-15948

Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field

published October 28, 2017

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.2th percentile
Published
2017-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field
    cvelistv5