CVE-2017-13994 - AskarLabs CVE Database

CVE-2017-13994

Vendor N/A

Product LOYTEC LVIS-3ME

Weakness CWE-79 · XSS

Published October 5, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.

Key dates

02Disclosure timeline

October 5, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-13994 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2021-24538 Current Book <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2024-51899 WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-39838 ProofreadPage improperly sanitizes multiline styles using Sanitizer::checkCSS CVE-2025-23877 WordPress Nite Shortcodes plugin <= 1.0 - Stored Cross Site Scripting (XSS) vulnerability CVE-2023-46251 Visual editor persistent Cross-site Scripting (XSS) in MyBB