CVE-2017-20155

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal Search. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is 855d9560d3782c105568eedf9b22a769fbf29cc0. It is recommended to upgrade the affected component. The identifier VDB-217069 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Dec 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-201569.8A vulnerability was found in Exciting Printer and classified as critical. This issue affects some unknown processing of the file lib/printer CVE-2017-201579.8A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the CVE-2017-201586.1** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in vova07 Yii2 FileAPI Widget up to 0.1.8. It has been declared as problematic. Af CVE-2017-201596.1A vulnerability was found in rf Keynote up to 0.x on Rails. It has been rated as problematic. Affected by this issue is some unknown functio CVE-2017-201609.8A vulnerability was found in flitto express-param up to 0.x. It has been classified as critical. This affects an unknown part of the file li CVE-2017-201617.8A vulnerability classified as problematic has been found in rofl0r MacGeiger. Affected is the function dump_wlan_at of the file macgeiger.c CVE-2017-201625.3A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the fi CVE-2017-201639.8A vulnerability has been found in Red Snapper NView and classified as critical. This vulnerability affects the function mutate of the file s CVE-2017-201646.1A vulnerability was found in Symbiote Seed up to 6.0.2. It has been classified as critical. Affected is the function onBeforeSecurityLogin o CVE-2017-201657.5A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/CVE-2017-201669.8Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between is_nil and raise.CVE-2017-201676.1A vulnerability, which was classified as problematic, was found in Minichan. This affects an unknown part of the file reports.php. The manip