Skip to content
OpenAdvisories
Unscored CVE-2017-15948 EUVD-2017-7364GHSA-7g42-fh7c-62xv

Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with th…

Published Oct 28, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Description

Perch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via the Asset Title field in conjunction with the Select File field. This is exploitable with a Limited Admin account.

References