CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. See the original NVD description below for full technical details.
CVE
CVE-2017-9332
Severity
MEDIUM
CVSS
6.1
EPSS
0.63%
Original NVD Description
The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.
Related CVEs
Other vulnerabilities affecting the same vendor(s)