CVE-2017-1000478 | BDVDB-2026-94721 Detail

Description#

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/elabftw/elabftw/issues/531

Exploit#

No public exploit known

History#

Version 12018-01-03Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.