VYPR
← All advisories
Medium severity5.4OSV Advisory· Published Sep 8, 2017· Updated Jun 17, 2026

CVE-2017-11611

CVE-2017-11611

Description

Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in a "create-file-popup" action, and the directory name in a "create-directory-popup" action, in the HTTP POST method to the "/plugin/file_manager/" script (aka an /admin/plugin/file_manager/browse// URI).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Wolfcms/WolfCMSOSV2 versions
    0.7.0, 0.7.1, 0.7.2, …+ 1 more
    • (no CPE)range: 0.7.0, 0.7.1, 0.7.2, …
    • cpe:2.3:a:wolfcms:wolf_cms:0.8.3.1:*:*:*:*:*:*:*
  • Wolf CMS/Wolf CMSllm-fuzzy
    Range: =0.8.3.1

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.