CVE-2017-9331

Published: 2017-06-01T05:29Z

Last Modified: 2024-11-21T03:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted meeting description parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt