Medium severity6.1NVD Advisory· Published Oct 3, 2017· Updated Jun 17, 2026
CVE-2017-12792
CVE-2017-12792
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the (1) linkname, (2) url, or (3) title parameter in an add action to linksmanage.php.
Affected products
2cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:nexusphp_project:nexusphp:1.5:*:*:*:*:*:*:*
- (no CPE)range: <=1.5
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.