PT-2017-12704

CVE-2017-12811

·

Published

2017-12-30

·

Updated

2018-01-11

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions PHPJabbers Star Rating Script version 4.0
Description The issue is related to stored XSS, which occurs via a rating item. This allows for the potential execution of malicious scripts.
Recommendations For PHPJabbers Star Rating Script version 4.0, update the script to a version that includes a fix for the stored XSS issue, or apply a patch if one is provided by the vendor. As a temporary workaround, consider validating and sanitizing all user input to prevent malicious script execution.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾