CVE-2017-6478: MANGOSWEBV4 Project MANGOSWEBV4

Medium severity, CVSS 6.1. EPSS: 2.6% chance of exploitation in the next 30 days.

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).

Affected products

• MANGOSWEBV4 Project MANGOSWEBV4: before 4.0.8 (fixed in 4.0.8)

Published 2017-03-05. Last modified 2026-06-17.