CVE-2017-20085

A vulnerability has been found in Atahualpa Theme and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to basic cross site scripting. The attack can be launched remotely.
References
Link Resource
http://seclists.org/fulldisclosure/2017/Feb/83 Exploit Mailing List Third Party Advisory
https://vuldb.com/?id.97375 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:bytesforall:atahualpa:-:*:*:*:*:wordpress:*:*

History

29 Jun 2022, 15:43

Type Values Removed Values Added
References (N/A) http://seclists.org/fulldisclosure/2017/Feb/83 - (N/A) http://seclists.org/fulldisclosure/2017/Feb/83 - Exploit, Mailing List, Third Party Advisory
References (N/A) https://vuldb.com/?id.97375 - (N/A) https://vuldb.com/?id.97375 - Third Party Advisory
First Time Bytesforall atahualpa
Bytesforall
CPE cpe:2.3:a:bytesforall:atahualpa:-:*:*:*:*:wordpress:*:*
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : 3.5
v3 : 5.4

23 Jun 2022, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-06-23 05:15

Updated : 2023-12-10 14:22


NVD link : CVE-2017-20085

Mitre link : CVE-2017-20085

CVE.ORG link : CVE-2017-20085


JSON object : View

Products Affected

bytesforall

  • atahualpa
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)