VDB
CVE-2017-20155
CVE-2017-20155
PUBLISHED
CVSS 3.5 LOW
A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl of the component Internal Search. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.0.6 is able to address this issue. The identifier of the patch is 855d9560d3782c105568eedf9b22a769fbf29cc0. It is recommended to upgrade the affected component. The identifier VDB-217069 was assigned to this vulnerability.
EPSS 0.61% · 47.7th percentile
Risk Scores
CVSS 3.1
3.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS Score
0.61%
47.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| sterc | google_analytics_dashboard_for_modx | 0 |
| Sterc | Google Analytics Dashboard for MODX | 1.0.5, 1.0.0, 1.0.1 |
Timeline
- Dec 30, 2022 CVE Published
- Dec 31, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 24, 2023 EPSS Score
- May 5, 2023 EPSS Score
- Jun 16, 2023 EPSS Score
- Jul 27, 2023 EPSS Score
- Sep 7, 2023 EPSS Score
- Oct 19, 2023 EPSS Score
- Nov 30, 2023 EPSS Score
- Jan 10, 2024 EPSS Score
References
- https://github.com/Sterc/Analytics-dashboard-widget/issues/11 issue
- https://github.com/Sterc/Analytics-dashboard-widget/pull/12 issue
- https://nvd.nist.gov/vuln/detail/CVE-2017-20155 advisory
- https://github.com/Sterc/Analytics-dashboard-widget/commit/855d9560d3782c105568eedf9b22a769fbf29cc0 url
- https://vuldb.com/?ctiid.217069 advisory
- https://github.com/Sterc/Analytics-dashboard-widget/milestone/2 vendor
- https://vuldb.com/?id.217069 advisory