CVE-2017-17911

Name of the Vulnerable Software and Affected Versions Archon version 3.21 rev-1

Description The issue concerns an XSS vulnerability in the referer parameter of an index.php?p=core/contact request, specifically in the contact.php file of the core package.

Recommendations For Archon version 3.21 rev-1, consider restricting access to the index.php?p=core/contact endpoint until a fix is available, and avoid using the referer parameter in this request to minimize the risk of exploitation.