CVE-2017-16356

MEDIO 6.1CVE-2017-16356 · Published 20/02/2018 · updated 17/06/2026

In breve

CVE-2017-16356 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda simple image gallery extended (kubik-rubik).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.5% delle vulnerabilità.
Correzione: aggiornare a 3.3.0 o successiva.

Package	Affected versions	Patched versions
simple image gallery extended kubik-rubik	`< 3.3.0`	`3.3.0`

Description

Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/plugin_sige/print.php link with a crafted img, name, or caption parameter.

References

packetstormsecurity.com/files/146422/Joomla-Kubik-Rubik-SIGE-3.2.3-Cross-Site-Scripting.html · Exploit
exploit-db.com/exploits/44104 · Exploit

Altre vulnerabilità di simple image gallery extended

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free