← All advisories

Medium severity4.8NVD Advisory· Published Oct 24, 2017· Updated Jun 17, 2026

CVE-2017-15872

CVE-2017-15872

Description

phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Phpwcms/Phpwcms2 versions
cpe:2.3:a:phpwcms:phpwcms:1.8.9:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpwcms:phpwcms:1.8.9:*:*:*:*:*:*:*
- (no CPE)range: <1.8.9

Patches

Vulnerability mechanics

References

2

github.com/slackero/phpwcms/commit/62c7c4a7a7de5effa0a82c89e77e53795a82e11dnvdIssue TrackingPatchThird Party Advisory
github.com/slackero/phpwcms/commit/90ee94a474b37919161f8112f9e36c53ad70492fnvdIssue TrackingPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.