CVE-2017-7363

Name of the Vulnerable Software and Affected Versions Pixie version 1.0.4

Description The issue allows for an XSS attack. The attack can be performed through the admin/index.php endpoint with specific parameters set, such as s=publish, m=module, and x.

Recommendations For Pixie version 1.0.4, as a temporary workaround, consider restricting access to the admin/index.php endpoint until a patch is available. Avoid using the parameters s, m, and x in this endpoint to minimize the risk of exploitation.