← back
CVE-2017-9516

CVE-2017-9516

EPSS 2.3%
Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.htmlunverifiedcve_referencewww.exploit-db.com/exploits/42143/unverifiedexploitdbwww.exploit-db.com/exploits/42143unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://craftcms.com/changelog#2-6-2982https://packetstormsecurity.com/files/142851/Craft-CMS-2.6-Cross-Site-Scripting-File-Upload.htmlhttps://twitter.com/CraftCMS/status/872599894912937984https://www.exploit-db.com/exploits/42143/