Archive

July 2017

Vulnerabilities first published in this month (UTC), newest first.

← June 2017 2017 / July August 2017 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2017-11503 Public exploit

Cross-site scripting in PHPMailer

PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist

Jul 20, 2017
Medium 6.1

CVE-2016-5394 Public exploit

Cross site scripting in Apache Sling

In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns allows script tags to pass through unencoded, leading to potential XSS vulnerabili…

Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.xss org.apache.sling:org.apache.sling.xss.compat Maven

Jul 19, 2017