EDB-42143

PoC

Craft CMS 2.6 - Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor Ahsan Tahirpublished 2017-06-08catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-9516US	medium5.4	2.80% (86th)	Exploit	2017-06-08
Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.