CVE Feed

    Dashboard / CVE / CVE-2017-17889

    CVE-2017-17889

    Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.

    Published:Apr 22, 2018
    Last Modified:Nov 21, 2024
    EPS:Apr 22, 2018
    EPSS Score:0.00206
    CVSS Score:5.4

    Affected Products

    Vendor
    Kliqqi
    Product
    Kliqqi Cms

    Exploits

    https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/https://edricteo.com/kliqqi-cms-xss-vulnerability-in-version-3.5.2/

    Related CVEs

    CVE-2024-48700 (CVSS 7.2) — Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backd…
    CVE-2024-42617 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/admin_…
    CVE-2024-42611 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/admin_page.php?link_i…
    CVE-2024-42619 (CVSS 8.8) — Pligg CMS v2.0.2 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/domain…
    CVE-2024-31673 (CVSS 9.8) — Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.…
    CVE-2020-21119 (CVSS 9.8) — SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue para…
    CVE-2020-21121 (CVSS 9.8) — Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admi…
    CVE-2016-10756 (CVSS 8.8) — Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upload because module.php?module=upload can be used t…
    CVE-2018-11405 (CVSS 8.8) — Kliqqi 2.0.2 has CSRF in admin/admin_users.php.…
    CVE-2017-17902 (CVSS 9.8) — SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High