CVE-2017-17059: Amtythumb Project Amtythumb

Medium severity, CVSS 6.1. EPSS: 3.4% chance of exploitation in the next 30 days.

XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to amtyThumbPostsAdminPg.php.

Affected products

• Amtythumb Project Amtythumb: up to and including 8.1.3

Published 2017-11-29. Last modified 2026-06-17.