What is CVE-2017-9547?

CVE-2017-9547 is a medium-severity vulnerability in Bigtreecms Bigtree Cms, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2017-06-12.

How severe is CVE-2017-9547?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Bigtreecms Bigtree Cms

CVE-2017-9547

admin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows remote authenticated users to inject arbitrary web script or HTML by launching an Edit Page action and entering the Navigation Title or Page Title of a page that is scheduled for future publication (aka a pending page change).

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (52.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Bigtreecms Bigtree_cms
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2017-9547?: CVE-2017-9547 is a medium-severity vulnerability in Bigtreecms Bigtree Cms, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2017-06-12.
How severe is CVE-2017-9547?: Medium severity. CVSS v3 base score is 5.4 out of 10.