CVE-2017-9548

admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or…

published June 12, 2017

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication (aka a pending page change).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00784 · 55.3th percentile
Published
2017-06-12T06:00Z
EPSS history
Timeline
  • 12 JUN 06:00Z
    admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or…
    cvelistv5