Vulnerabilities > Apache2Triad > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-08-23 CVE-2017-12971 Cross-site Scripting vulnerability in Apache2Triad 1.5.4
Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php.
network
low complexity
apache2triad CWE-79
6.1