CVE-2017-16919

MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a crafted description parameter.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mapos_project:mapos:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:17

Type Values Removed Values Added
References () https://github.com/RamonSilva20/mapos/issues/81 - Issue Tracking () https://github.com/RamonSilva20/mapos/issues/81 - Issue Tracking

Information

Published : 2017-11-21 08:29

Updated : 2025-04-20 01:37


NVD link : CVE-2017-16919

Mitre link : CVE-2017-16919

CVE.ORG link : CVE-2017-16919


JSON object : View

Products Affected

mapos_project

  • mapos
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')