CVE-2017-6541: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0.

Security readout for executives and security teams

CVE-2017-6541 is a cross-site scripting issue in WebPageTest 3.0. If an exposed vulnerable page receives crafted input, an attacker could run script in a user’s browser as if it came from the trusted site. The provided sources do not give a CVSS score, confirmed patch level, or active exploitation evidence. Exposure is most likely on internet-accessible or internally shared WebPageTest 3.0 deployments where /benchmarks/viewtest.php is reachable. The bundle’s affected-product metadata is incomplete, so validation should focus on confirming deployed WebPageTest version and route accessibility. Treat this as a moderate-priority legacy web exposure issue. It is not marked as actively exploited in the provided sources, but exposed WebPageTest 3.0 instances could create session theft, phishing, or user-trust risk. Mitigation focus: Check official WebPageTest project guidance for fixed versions or patches.; Restrict access to WebPageTest administrative and benchmark pages where possible.; Prioritize upgrading or replacing WebPageTest 3.0 deployments after vendor confirmation..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.