CVEvulnerability
CVE-2017-2169
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
• maxbuttons project maxbuttons (<= 6.18)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093 Third Party Advisory, VDB Entry
- https://jvn.jp/en/jp/JVN70411623/index.html Third Party Advisory, VDB Entry
- https://wordpress.org/plugins/maxbuttons/#developers Release Notes, Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2017-000093 Third Party Advisory, VDB Entry
- https://jvn.jp/en/jp/JVN70411623/index.html Third Party Advisory, VDB Entry
- https://wordpress.org/plugins/maxbuttons/#developers Release Notes, Vendor Advisory