CVE-2017-12948

MEDIUM · CVSS 6.1 EPSS 0.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-08-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-12948

Severity

MEDIUM

CVSS

6.1

EPSS

0.76%

WordPress

Original NVD Description

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.