CVE-2017-15682

Name of the Vulnerable Software and Affected Versions: Crafter Studio version 3.0.1

Description: The issue allows an unauthenticated attacker to inject malicious JavaScript code, resulting in a stored/blind XSS in the admin panel. This enables the attacker to execute malicious code without authentication.

Recommendations: For Crafter Studio version 3.0.1, update to a version that includes a fix for this issue to prevent malicious JavaScript code injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.