CVE-2017-20085

A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.
References
Link Resource
http://seclists.org/fulldisclosure/2017/Feb/83 Exploit Mailing List Third Party Advisory
https://vuldb.com/?id.97375 Third Party Advisory
http://seclists.org/fulldisclosure/2017/Feb/83 Exploit Mailing List Third Party Advisory
https://vuldb.com/?id.97375 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bytesforall:atahualpa:-:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 03:22

Type Values Removed Values Added
References () http://seclists.org/fulldisclosure/2017/Feb/83 - Exploit, Mailing List, Third Party Advisory () http://seclists.org/fulldisclosure/2017/Feb/83 - Exploit, Mailing List, Third Party Advisory
References () https://vuldb.com/?id.97375 - Third Party Advisory () https://vuldb.com/?id.97375 - Third Party Advisory
CVSS v2 : 3.5
v3 : 5.4
v2 : 3.5
v3 : 3.5

Information

Published : 2022-06-23 05:15

Updated : 2024-11-21 03:22


NVD link : CVE-2017-20085

Mitre link : CVE-2017-20085

CVE.ORG link : CVE-2017-20085


JSON object : View

Products Affected

bytesforall

  • atahualpa
CWE
CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')