Description
The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.
Unscored
CVE-2017-9332
EUVD-2017-18267GHSA-8569-q79q-45hc
The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the…
Published Jun 6, 2017 · Updated Aug 5, 2024 · Assigned by mitre