CVE-2017-6810

Description

paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/paintballrefjosh/MaNGOSWebV4/issues/20 ↗
• http://www.securityfocus.com/bid/96939 ↗