CVE-2017-9332: Pivotx

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag.

Affected products

• Pivotx Pivotx: version 2.3.11 only

Published 2017-06-06. Last modified 2026-06-17.