Files
CVEs-PoC/2017/CVE-2017-7188.md
2025-09-29 21:09:30 +02:00

707 B

CVE-2017-7188

Description

Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/toggleCollapse.

POC

Reference

Github