CVE-2017-1000160: Expressionengine

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection

Affected products

• Expressionengine Expressionengine: version 3.4.2 only

Published 2017-11-17. Last modified 2026-06-17.