CVE-2017-8402: Pivotx

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file.

Affected products

• Pivotx Pivotx: version 2.3.11 only

Published 2017-05-31. Last modified 2026-06-17.