CVE-2017-17902

CRITICAL 9.8CVE-2017-17902 · Published 22/04/2018 · updated 17/06/2026

In short

CVE-2017-17902 is a CRITICAL (CVSS 9.8) vulnerability affecting kliqqi cms (kliqqi).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kliqqi cms kliqqi	`= 3.5.2`	No fix yet

SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.