CVE-2017-9624

MEDIUM

Telaxus/EPESI <1.8.2 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data.

References (2)

[Issue Tracking, Patch, Third Party Advisory] https://github.com/Telaxus/EPESI/commit/48fb5e81cd7a47d98bade092a5a72d8177621dbd

[Exploit, Issue Tracking, Patch, Third Party Advisory] https://github.com/Telaxus/EPESI/issues/186

Scores

CVSS v3 6.1

EPSS 0.0022

EPSS Percentile 44.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (2)

epesi/epesi < 1.8.2

n/a/n/a

Published Jun 14, 2017

Tracked Since Feb 18, 2026