CVE-2017-7871: Tdm Project Tdm

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter).

Affected products

• Tdm Project Tdm: up to and including 2017-04-12

Published 2017-04-14. Last modified 2026-06-17.