Medium severity6.1NVD Advisory· Published Feb 19, 2018· Updated Jun 17, 2026

CVE-2017-16755

Description

An issue was discovered in Userscape HelpSpot before 4.7.2. A reflected cross-site scripting vulnerability exists in the "return" parameter of the "index.php?pg=moderated" endpoint. It executes when the return link is clicked.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Userscape/HelpSpot2 versions
cpe:2.3:a:userscape:helpspot:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:userscape:helpspot:*:*:*:*:*:*:*:*range: <=4.7.1
- (no CPE)range: <4.7.2

Patches

Vulnerability mechanics

References

ruby.sh/helpspot-disclosure-20180206.txtnvdExploitThird Party Advisory
www.helpspot.com/releasesnvdVendor Advisory
www.helpspot.com/releases/version-4-7-2nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000