NVD

Id
86513  
Name
CVE-2017-9331  
Description
The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-06-12  
Published
2017-06-01  
Modified Date
2017-06-09  
Seq
2017-9331  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
419910 86513 CVE-2017-8052 https://craftcms.com/changelog#2-6-2974  View
419911 86513 CVE-2017-8052 https://twitter.com/CraftCMS/status/855535309878112256  View
419912 86513 CVE-2017-8052 https://craftcms.com/changelog#2-6-2974  View
419913 86513 CVE-2017-8052 https://twitter.com/CraftCMS/status/855535309878112256  View
423085 86513 CVE-2017-2505 https://support.apple.com/HT207798  View
423086 86513 CVE-2017-2505 https://support.apple.com/HT207801  View
423087 86513 CVE-2017-2505 https://support.apple.com/HT207804  View
423088 86513 CVE-2017-2505 https://support.apple.com/HT207798  View
423089 86513 CVE-2017-2505 https://support.apple.com/HT207801  View
423090 86513 CVE-2017-2505 https://support.apple.com/HT207804  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68348 JVNDB-2017-004605 Telaxus EPESI の Agenda コンポーネントにおける格納型クロスサイトスクリプティングの脆弱性 Telaxus EPESI の Agenda コンポーネントには、格納型クロスサイトスクリプティングの脆弱性が存在します。 CVE-2017-9331 0 CVE-2017-9331 86513 3.5 5.4 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004605.html 2017-05-29 2017-06-30 View