CVE-2017-15092 - AskarLabs CVE Database

CVE-2017-15092

Vendor Powerdns

Product PowerDNS Recursor

Weakness CWE-79 · XSS

Published January 23, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.

Key dates

02Disclosure timeline

January 23, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-15092 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2025-53528 Cadwyn is vulnerable to an XSS attack through its docs page CVE-2018-25073 Newcomer1989 TSN-Ranksystem bot.php getlog cross site scripting CVE-2024-34569 WordPress Zotpress plugin <= 7.3.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-30434 WordPress WP-CRM System plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-4411 Mihdan: Yandex Turbo Feed <= 1.6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode