CVE-2017-8920

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS

published June 6, 2017

CVSS
—
EPSS
1%
Percentile
51.6
In the wild
Unconfirmed
What it is

irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00682 · 51.6th percentile
Published
2017-06-06T16:00Z
EPSS history
Timeline
  • 06 JUN 16:00Z
    irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS
    cvelistv5