Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2017-2171

BestWebSoft Captcha: Cross-site scripting vulnerability in Captcha prior to version 4.3.0…

No CVSS scoreEPSS 0.0089 · 59th percentile

Published by the CVE Program (CNA: jpcert) at 22 May 2017, 16:00 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
BestWebSoft Captcha
  • affected prior to version 4.3.0
BestWebSoft Car Rental
  • affected prior to version 1.0.5
BestWebSoft Contact Form Multi
  • affected prior to version 1.2.1
BestWebSoft Contact Form
  • affected prior to version 4.0.6
BestWebSoft Contact Form to DB
  • affected prior to version 1.5.7
BestWebSoft Custom Admin Page
  • affected prior to version 0.1.2
BestWebSoft Custom Fields Search
  • affected prior to version 1.3.2
BestWebSoft Custom Search
  • affected prior to version 1.36
BestWebSoft Donate
  • affected prior to version 2.1.1
BestWebSoft Email Queue
  • affected prior to version 1.1.2
BestWebSoft Error Log Viewer
  • affected prior to version 1.0.6
BestWebSoft Facebook Button
  • affected prior to version 2.54
BestWebSoft Featured Posts
  • affected prior to version 1.0.1
BestWebSoft Gallery Categories
  • affected prior to version 1.0.9
BestWebSoft Gallery
  • affected prior to version 4.5.0
BestWebSoft Google +1
  • affected prior to version 1.3.4
BestWebSoft Google AdSense
  • affected prior to version 1.44
BestWebSoft Google Analytics
  • affected prior to version 1.7.1
BestWebSoft Google Captcha (reCAPTCHA)
  • affected prior to version 1.28
BestWebSoft Google Maps
  • affected prior to version 1.3.6
BestWebSoft Google Shortlink
  • affected prior to version 1.5.3
BestWebSoft Google Sitemap
  • affected prior to version 3.0.8
BestWebSoft Htaccess
  • affected prior to version 1.7.6
BestWebSoft Job Board
  • affected prior to version 1.1.3
BestWebSoft Latest Posts
  • affected prior to version 0.3
BestWebSoft Limit Attempts
  • affected prior to version 1.1.8
BestWebSoft LinkedIn
  • affected prior to version 1.0.5
BestWebSoft Multilanguage
  • affected prior to version 1.2.2
BestWebSoft PDF & Print
  • affected prior to version 1.9.4
BestWebSoft Pagination
  • affected prior to version 1.0.7
BestWebSoft Pinterest
  • affected prior to version 1.0.5
BestWebSoft Popular Posts
  • affected prior to version 1.0.5
BestWebSoft Portfolio
  • affected prior to version 2.4
BestWebSoft Post to CSV
  • affected prior to version 1.3.1
BestWebSoft Profile Extra
  • affected prior to version 1.0.7
BestWebSoft PromoBar
  • affected prior to version 1.1.1
BestWebSoft Quotes and Tips
  • affected prior to version 1.32
BestWebSoft Re-attacher
  • affected prior to version 1.0.9
BestWebSoft Realty
  • affected prior to version 1.1.0
BestWebSoft Relevant - Related Posts
  • affected prior to version 1.2.0

And 11 more products. The full list is on the CVE record.

Identifiers
CVE-2017-2171
CNA
jpcert
Tags
Published
22 May 2017
Updated
5 Aug 2024

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0089, the 59th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 22 May 2017. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.