CVE-2007-3017

MEDIUM · CVSS 4 EPSS 5.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-07-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2007-3017

Severity

MEDIUM

CVSS

EPSS

5.14%

Java

Original Filing — NVD Description

The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to admin/applets/wysiwyg/rendereditor.asp, which allows remote authenticated users to inject arbitrary JavaScript via a request to admin/worklist/worklist_edit.asp.