{"id":"CVE-2017-5960","details":"An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the \"phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php\" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.","modified":"2026-07-08T12:40:56.090467Z","published":"2017-02-12T04:59:00.173Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/96201"},{"type":"FIX","url":"https://github.com/PhalconEye/phalconeye/issues/133"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/phalconeye/phalconeye","events":[{"introduced":"0"},{"last_affected":"9ac03cae7feadf939e0623e8212484e048f4fabe"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"0.4.1"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:phalconeye_project:phalconeye:*:*:*:*:*:*:*:*"}}],"versions":["v.0.4.1","v.0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-5960.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}