Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-12-28	CVE-2017-17949	Cross-site Scripting vulnerability in Cells Blog 3.5 Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. network low complexity cells CWE-79	6.1
2017-12-28	CVE-2017-17948	Cross-site Scripting vulnerability in Cells Blog 3.5 Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request. network low complexity cells CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.