Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.4
CVSSv3

CVE-2017-1001001

Published: 01/11/2017 Updated: 07/11/2023
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Subscribe to Pluxml

Vulnerability Summary

PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges.

Vulnerable Product Search on Vulmon Subscribe to Product

pluxml pluxml 5.6

Vendor Advisories

Debian CVElist Bug Report Logs: CVE-2017-1001001: pluxml: XSS and missing httponly flag
Debian Bug report logs - #881796 CVE-2017-1001001: pluxml: XSS and missing httponly flag Package: pluxml; Maintainer for pluxml is Tanguy Ortolo <tanguy+debian@ortoloeu>; Source for pluxml is src:pluxml (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Wed, 15 Nov 2017 07:18:02 UTC Severity: grave ...

References

CWE-79https://github.com/pluxml/PluXml/issues/253https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=881796https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook