CVE-2017-8302: Blueriver Muracms

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm, admin/core/views/cusers/inc/dsp_nextn.cfm, admin/core/views/cusers/inc/dsp_search_form.cfm, admin/core/views/cusers/inc/dsp_users_list.cfm, admin/core/views/cusers/list.cfm, and admin/core/views/cusers/listusers.cfm.

Affected products

• Blueriver Muracms: version 7.0.6967 only

Published 2017-04-27. Last modified 2026-06-17.