TI-2017-08653 CVE-2017-11682 · GHSA-cgf2-r6w4-mj7mStored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to…Priority LOW 29Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or (3) rootdir parameter in hashcat.php.CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00804 · Published 2017-07-27 · No fix listed CWE-79