CVE-2017-12138
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 4.2%
exploitation probability
4.2%top 10% of all CVEs
observed exploitation
nono source reports it
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.
Affected products
n/a · n/a