Pixie · Pixie · CVE-2017-7363
**Name of the Vulnerable Software and Affected Versions**
Pixie version 1.0.4
**Description**
The issue allows for an XSS attack. The attack can be performed through the `admin/index.php` endpoint with specific parameters set, such as `s=publish`, `m=module`, and `x`.
**Recommendations**
For Pixie version 1.0.4, as a temporary workaround, consider restricting access to the `admin/index.php` endpoint until a patch is available. Avoid using the parameters `s`, `m`, and `x` in this endpoint to minimize the risk of exploitation.