CVE-2017-16755

CVE-2017-16755 describes a reflected cross-site scripting (XSS) vulnerability in Userscape HelpSpot versions prior to 4.7.2. Specifically, the "return" parameter of the "index.php?pg=moderated" endpoint is susceptible to script injection, which executes when a user clicks a crafted return link. This vulnerability is rated as Medium severity (CVSS 6.1), indicating it can be exploited over a network with low attack complexity, requiring user interaction, and potentially leading to limited impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.