CVE-2009-4320

2009-12-1423:00:00

mitre

www.cve.org

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

57.6%

JSON

Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

References

secunia.com/advisories/37711

www.exploit-db.com/exploits/10387

exchange.xforce.ibmcloud.com/vulnerabilities/54726