CVE-2017-15682

MediumCVSS 6.1

Published: 27/11/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.74%

50th percentile - higher than 50% of all known CVEs

Summary

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker can inject malicious JavaScript code, leading to stored/blind XSS in the admin panel.

Risk Assessment

An attacker could steal admin sessions, modify content, or take over the admin panel, compromising the confidentiality and integrity of the system.

Recommendation

Immediately upgrade Crafter CMS to a patched version and implement input validation and output encoding for user-supplied data.

Original NVD description (English source)

In Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.