CVE-2017-7362

Name of the Vulnerable Software and Affected Versions Pixie version 1.0.4

Description The issue allows for an XSS attack. The attack can be performed through the "s=publish&m=dynamic&x=" parameter in the admin/index.php endpoint.

Recommendations For Pixie version 1.0.4, update to a version that fixes this issue, as using the admin/index.php endpoint with the s, m, and x parameters can lead to an XSS attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.