Security Advisory
CVE-2017-5494
5.4
MEDIUM
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (1) comment frame or (2) avatar frame.
Published Date
January 15, 2017
Official Source
NIST NVD Advisory