CVE-2005-2112
MEDIUM 4.3EPSS 1.7%
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) order parameter to edit.php or (2) cid parameter to comment_edit.php.
- CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 1.74% chance of exploitation in the next 30 days, 77th percentile
- Published
- 2005-07-01
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://www.gulftech.org/?node=research&article_id=00086-06292005
- http://www.xoops.org/modules/news/article.php?storyid=2383