CVE-2017-5960: An issue was discovered in Phalcon Eye through 0.4.1.

Security readout for executives and security teams

CVE-2017-5960 is a cross-site scripting issue in Phalcon Eye through 0.4.1. A crafted link could cause a user's browser to run attacker-controlled script in the vulnerable site's context. Sources do not provide a CVSS score, patch details, or evidence of active exploitation. Exposure is most likely on internet-facing or intranet Phalcon Eye deployments through 0.4.1 where the bundled Pydio WebODF editor frame.php path is reachable. The source bundle does not identify affected CPEs or confirm whether later versions are fixed. Treat this as a moderate web application risk. It can affect user trust and session security if vulnerable sites are still deployed, but the provided evidence does not show active exploitation or a published severity score. Mitigation focus: Identify any Phalcon Eye deployments at version 0.4.1 or earlier.; Check PhalconEye project guidance for a fixed release or maintained replacement.; Restrict access to the affected frame.php path until remediation is confirmed..

Prepared

Jun 13, 2026, 06:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.