CVE-2017-9547

admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or…

published June 12, 2017

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and entering the Navigation Title or Page Title of a page that is scheduled for future publication (aka a pending page change).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.3th percentile
Published
2017-06-12T06:00Z
EPSS history
Timeline
  • 12 JUN 06:00Z
    admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or…
    cvelistv5