Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-9546

Description

admin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of service (inability to save revisions) via XSS sequences in a revision name.

POC

Reference

- https://github.com/bigtreecms/BigTree-CMS/issues/298

Github

No PoCs found on GitHub currently.