FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.
References
Link | Resource |
---|---|
https://github.com/d4wner/Vulnerabilities-Report/blob/master/FS%20Lynda%20Clone.md | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2017-12-27 09:08
Updated : 2018-01-09 09:47
NVD link : CVE-2017-17904
Mitre link : CVE-2017-17904
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
fortunescripts
- lynda_clone