VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2017-16514

CVE-2017-16514

Description

Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Website Baker/Websitebakerllm-fuzzy3 versions
    =2.10.0+ 2 more
    • (no CPE)range: =2.10.0
    • (no CPE)range: = 2.10.0
    • cpe:2.3:a:websitebaker:websitebaker:2.10.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.