CVE-2004-0705

2004-07-2104:00:00

mitre

www.cve.org

AI Score

6.2

Confidence

High

EPSS

0.005

Percentile

75.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.