CVE-2009-2327

2009-07-0516:00:00

mitre

www.cve.org

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

38.5%

JSON

Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_variant1 parameter.

References

osvdb.org/55676

osvdb.org/55695

www.exploit-db.com/exploits/9068