CVE-2017-12138
Published · Updated
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 3.4%
exploitation probability
3.4%top 11% of all CVEs
observed exploitation
nono source reports it
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.
Affected products
n/a · n/a