Medium severity6.1NVD Advisory· Published Jul 31, 2017· Updated May 13, 2026
CVE-2017-11727
CVE-2017-11727
Description
services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.
Affected products
1- cpe:2.3:a:connectwise:manage:2017.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- becomepentester.blogspot.in/2017/07/ConnectWise-Manage-XSS-CVE-2017-11727.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.