CVE-2017-17057

There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280

published December 4, 2017

CVSS
—
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied data in the 'Range' field of the 'Department' module in a Personnel Advanced Query. A remote attacker can execute arbitrary HTML and script code in the browser in the context of the vulnerable application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01238 · 68.9th percentile
Published
2017-12-04T14:00Z
EPSS history
Timeline
  • 04 DEC 14:00Z
    There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280
    cvelistv5