CVE-2017-17889: Kliqqi CMS

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.

Affected products

• Kliqqi Kliqqi CMS: version 3.5.2 only

Published 2018-04-22. Last modified 2026-06-17.