Lucene search

K
cvelistMitreCVELIST:CVE-2007-2804
HistoryMay 22, 2007 - 7:00 p.m.

CVE-2007-2804

2007-05-2219:00:00
mitre
www.cve.org

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) brand and (2) Msg parameters.

5.7 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.7%

Related for CVELIST:CVE-2007-2804