VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Nov 30, 2017· Updated Jun 17, 2026

CVE-2017-14197

CVE-2017-14197

Description

An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Site Scripting (XSS) issues in Matrix WYSIWYG plugins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Squiz/Matrix9 versions
    cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:squiz:matrix:*:*:*:*:*:*:*:*range: <=5.3.6.0
    • cpe:2.3:a:squiz:matrix:5.4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:squiz:matrix:5.4.1.2:*:*:*:*:*:*:*
    • (no CPE)range: <5.3.6.1, <5.4.1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.