← All advisories

Medium severity5.4NVD Advisory· Published Nov 17, 2017· Updated Jun 17, 2026

CVE-2017-1000160

CVE-2017-1000160

Description

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection

Affected products

2

Expressionengine/Expressionenginellm-create2 versions
<3.4.3+ 1 more
- (no CPE)range: <3.4.3
- cpe:2.3:a:expressionengine:expressionengine:3.4.2:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

docs.expressionengine.com/latest/about/changelog.htmlnvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.