CVE-2017-9548
12.06.2017, 06:29
admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching a Home Template Edit Page action and entering the Navigation Title of a page that is scheduled for future publication (aka a pending page change).
| Vendor | Product | Version |
|---|---|---|
| bigtreecms | bigtree_cms | 𝑥 ≤ 4.2.18 |
𝑥
= Vulnerable software versions