Vulnerability Details CVE-2016-7149
Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://www.openwall.com/lists/oss-security/2016/09/12/1
- http://www.openwall.com/lists/oss-security/2016/09/15/4
- http://www.securityfocus.com/bid/92967
- https://github.com/b2evolution/b2evolution/commit/9a4ab85439d1b838ee7b8eeebbf59174bb787811
- http://www.openwall.com/lists/oss-security/2016/09/12/1
- http://www.openwall.com/lists/oss-security/2016/09/15/4
- http://www.securityfocus.com/bid/92967
- https://github.com/b2evolution/b2evolution/commit/9a4ab85439d1b838ee7b8eeebbf59174bb787811
Products affected by CVE-2016-7149
-
cpe:2.3:a:b2evolution:b2evolution:4.1.0
-
cpe:2.3:a:b2evolution:b2evolution:4.1.1
-
cpe:2.3:a:b2evolution:b2evolution:4.1.2
-
cpe:2.3:a:b2evolution:b2evolution:4.1.3
-
cpe:2.3:a:b2evolution:b2evolution:4.1.4
-
cpe:2.3:a:b2evolution:b2evolution:4.1.5
-
cpe:2.3:a:b2evolution:b2evolution:4.1.6
-
cpe:2.3:a:b2evolution:b2evolution:4.1.7
-
cpe:2.3:a:b2evolution:b2evolution:5.1.2
-
cpe:2.3:a:b2evolution:b2evolution:5.2.0
-
cpe:2.3:a:b2evolution:b2evolution:5.2.1
-
cpe:2.3:a:b2evolution:b2evolution:5.2.2
-
cpe:2.3:a:b2evolution:b2evolution:6-9-4
-
cpe:2.3:a:b2evolution:b2evolution:6-9-5
-
cpe:2.3:a:b2evolution:b2evolution:6.0.0
-
cpe:2.3:a:b2evolution:b2evolution:6.1.2
-
cpe:2.3:a:b2evolution:b2evolution:6.4.2
-
cpe:2.3:a:b2evolution:b2evolution:6.4.3
-
cpe:2.3:a:b2evolution:b2evolution:6.4.4
-
cpe:2.3:a:b2evolution:b2evolution:6.5.0
-
cpe:2.3:a:b2evolution:b2evolution:6.6.0
-
cpe:2.3:a:b2evolution:b2evolution:6.6.1
-
cpe:2.3:a:b2evolution:b2evolution:6.6.10
-
cpe:2.3:a:b2evolution:b2evolution:6.6.2
-
cpe:2.3:a:b2evolution:b2evolution:6.6.3
-
cpe:2.3:a:b2evolution:b2evolution:6.6.4
-
cpe:2.3:a:b2evolution:b2evolution:6.6.5
-
cpe:2.3:a:b2evolution:b2evolution:6.6.6
-
cpe:2.3:a:b2evolution:b2evolution:6.6.7
-
cpe:2.3:a:b2evolution:b2evolution:6.6.8
-
cpe:2.3:a:b2evolution:b2evolution:6.6.9
-
cpe:2.3:a:b2evolution:b2evolution:6.7.0
-
cpe:2.3:a:b2evolution:b2evolution:6.7.1
-
cpe:2.3:a:b2evolution:b2evolution:6.7.2
-
cpe:2.3:a:b2evolution:b2evolution:6.7.3
-
cpe:2.3:a:b2evolution:b2evolution:6.7.4
-
cpe:2.3:a:b2evolution:b2evolution:6.7.5