Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.jease.org/download/2.9/ - | |
References | () https://groups.google.com/forum/?fromgroups#%21topic/jease/2BHaDww-5ac%5B1-25%5D - | |
References | () https://www.htbridge.com/advisory/HTB23104 - |
Information
Published : 2012-08-20 20:55
Updated : 2025-04-11 00:51
NVD link : CVE-2012-4052
Mitre link : CVE-2012-4052
CVE.ORG link : CVE-2012-4052
JSON object : View
Products Affected
jease
- jease
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')