CVE-2017-7944

MEDIUM

Xoops - XSS

Title source: rule

Description

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.

References (2)

Scores

CVSS v3 6.1
EPSS 0.0023
EPSS Percentile 46.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status published

Affected Products (2)

n/a/n/a
xoops/xoops

Timeline

Published Apr 24, 2017
Tracked Since Feb 18, 2026