CVE-2017-7363

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Mar 31, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-73649.8In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_daCVE-2017-73657.8In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.CVE-2017-73665.5In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.CVE-2017-73677.8In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.CVE-2017-73687.0In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.CVE-2017-73697.8In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading toCVE-2017-73707.0In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free cCVE-2017-73717.8In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned oCVE-2017-73727.0In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow orCVE-2017-73737.8In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.CVE-2017-73747.8Use-after-free vulnerability in fs/crypto/ in the Linux kernel before 4.10.7 allows local users to cause a denial of service (NULL pointer dCVE-2017-73759.8A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, D
CVE-2017-7363: Medium severity, CVSS 6.1 | Vulnix