Unscored CVE-2017-15869 EUVD-2017-7291GHSA-p2x3-r39x-gcmp

Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web s…

Published Jan 18, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in knowledgebase.php in LiveZilla before 7.0.8.9 allows remote attackers to inject arbitrary web script or HTML via the search-for parameter.

References

20180116 ADVISORY - LiveZilla - Cross-site scripting (XSS) vulnerability in knowledgebase.php - CVE-2017-15869 mailing-list
https://www.livezilla.net/changelog/en/
https://www.pallas.com/advisories/cve-2017-15869-livezilla-xss-knowledgebase