CVE-2011-4938

2020-02-1120:04:38

redhat

www.cve.org

0.002 Low

EPSS

Percentile

61.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) index.php and (2) loader.php.

CNA Affected

[
  {
    "product": "Ariadne",
    "vendor": "Ariadne",
    "versions": [
      {
        "status": "affected",
        "version": "2.7.6"
      }
    ]
  }
]