Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a comment.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-12-20T09:00:00
Updated: 2024-08-05T20:59:17.921Z
Reserved: 2017-12-20T00:00:00
Link: CVE-2017-17792
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-12-20T09:29:01.537
Modified: 2024-11-21T03:18:40.640
Link: CVE-2017-17792
Redhat
No data.