CVE-2017-14850

CVE-2017-14850 describes multiple Stored Cross-site Scripting (XSS) vulnerabilities in all known versions of the Orpak SiteOmat web management console, stemming from improper validation of external user input. This allows an attacker with access to the web interface to hijack user sessions or redirect victims to malicious external servers. The vulnerability has a CVSS score of 6.1 (Medium), indicating a network-based attack with low complexity, requiring user interaction, and resulting in low impact to confidentiality and integrity. There is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion, though it has received some media coverage.