CVE-2017-17937: Vanguard Project Marketplace Digital Products PHP

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.

Affected products

• Vanguard Project Marketplace Digital Products PHP: up to and including 1.9

Published 2017-12-28. Last modified 2026-06-17.