CVE-2017-16356 is a reflected Cross-Site Scripting (XSS) vulnerability affecting Kubik-Rubik SIGE (Simple Image Gallery Extended) versions prior to 3.3.0. An attacker can exploit this by enticing a victim to click a specially crafted link, injecting malicious JavaScript through the img, name, or caption parameters in print.php. This vulnerability has a CVSSv3 score of 6.1 (Medium), indicating low attack complexity and no privileges required, but it does require user interaction and can lead to limited confidentiality and integrity impacts. While not actively exploited in the wild and not on the KEV catalog, public exploit code exists on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 3.3.0CPE matchmatch criteria | cpe:2.3:a:kubik-rubik:simple_image_gallery_extended:*:*:*:*:*:joomla\!:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.