CVE-2017-12810: stivasoft phpjabbers newsletter script – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2017-12810

中危 6.1CVE-2017-12810 · Published 30/12/2017 · updated 17/06/2026

要点

CVE-2017-12810 是影响 phpjabbers newsletter script (stivasoft) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.63%，高于 50.5% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
phpjabbers newsletter script stivasoft	`= 4.2`	No fix yet

Description

PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.

References

pastebin.com/raw/QYxSkH1g · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free