CVE-2017-12788: Metinfo

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in Metinfo 5.3.18 allows remote attackers to inject arbitrary web script or HTML via the (1) class1 parameter or the (2) anyid parameter.

Affected products

• Metinfo Metinfo: version 5.3.18 only

Published 2019-05-09. Last modified 2026-06-17.