Medium severity6.1NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2017-16514

Description

Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/index.php (Site Title) in WebsiteBaker 2.10.0 allow attackers to insert persistent JavaScript code that gets reflected back to users in multiple areas in the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Website Baker/Websitebakerinferred2 versions
= 2.10.0+ 1 more
- (no CPE)range: = 2.10.0
- (no CPE)range: =2.10.0

Patches

Vulnerability mechanics

References

gist.github.com/anonymous/13df19c04c7e86c0f5256b91376d593anvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000