CVE-2017-18024: Avantfax

Medium severity, CVSS 6.1. EPSS: 4.5% chance of exploitation in the next 30 days.

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.

Affected products

• Avantfax Avantfax: version 3.3.3 only

Published 2018-01-10. Last modified 2026-06-17.