Unrated severityNVD Advisory· Published Jul 17, 2007· Updated Jun 16, 2026
CVE-2007-3017
CVE-2007-3017
Description
The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent to admin/applets/wysiwyg/rendereditor.asp, which allows remote authenticated users to inject arbitrary JavaScript via a request to admin/worklist/worklist_edit.asp.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:activeweb:contentserver:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:activeweb:contentserver:*:*:*:*:*:*:*:*range: <=5.6.2929
- (no CPE)range: <5.6.2964
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/24898nvdExploit
- secunia.com/advisories/26063nvdVendor Advisory
- osvdb.org/39745nvd
- securityreason.com/securityalert/2900nvd
- www.redteam-pentesting.de/advisories/rt-sa-2007-006.phpnvd
- www.securityfocus.com/archive/1/473627/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/35399nvd
News mentions
0No linked articles in our index yet.