CVE-2017-20288 | QCubed up to 3.1.1 step_2.php installation_path cross site scripting

October 22, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in QCubed up to 3.1.1. This affects an unknown part of the file /assets/php/_devtools/installer/step_2.php. This manipulation of the argument installation_path causes cross site scripting.

This vulnerability is handled as CVE-2017-20288. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More