CVE-2017-20176

A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated remotely. The name of the patch is fb6fae2f8a9b146471450b5b0281046a17d1ac8d. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-220204.

• CWE-79

• https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8dPatch, Third Party Advisory
• https://vuldb.com/?ctiid.220204Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220204Third Party Advisory
• https://github.com/ciubotaru/share-on-diaspora/commit/fb6fae2f8a9b146471450b5b0281046a17d1ac8dPatch, Third Party Advisory
• https://vuldb.com/?ctiid.220204Permissions Required, Third Party Advisory
• https://vuldb.com/?id.220204Third Party Advisory

Published

Feb 6, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-20170A vulnerability was found in ollpu parontalli. It has been c…9.8
• CVE-2017-20171A vulnerability classified as critical has been found in Pri…9.8
• CVE-2017-20172A vulnerability was found in ridhoq soundslike. It has been …9.8
• CVE-2017-20173A vulnerability was found in AlexRed contentmap. It has been…9.8
• CVE-2017-20174A vulnerability was found in bastianallgeier Kirby Webmentio…9.8
• CVE-2017-20175A vulnerability classified as problematic has been found in …6.1
• CVE-2017-20177A vulnerability, which was classified as problematic, has be…6.1
• CVE-2017-20178** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…7.5
• CVE-2017-20179A vulnerability was found in InSTEDD Pollit 2.3.1. It has be…9.8
• CVE-2017-2018Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-20180A vulnerability classified as critical has been found in Zer…7.5
• CVE-2017-20181A vulnerability classified as critical was found in hgzojer …5.5