CVE-2017-7387: Helpmewatchwho Project Helpmewatchwho

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter).

Affected products

• Helpmewatchwho Project Helpmewatchwho: up to and including 2017-03-23

Published 2017-04-01. Last modified 2026-06-17.