Description Craft CMS before 2.6.2974 allows XSS attacks. Remediation References CVE-2017-8052 Related Vulnerabilities ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-4753) WordPress Plugin bbPress Login Register Links On Forum Topic Pages Cross-Site Request Forgery (2.7.5) WordPress Plugin Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Remote Code Execution (1.5.89) WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.3) PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2005-0227) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-8052