CVE-2013-2309

2013-06-1701:00:00

jpcert

www.cve.org

openpne

cross-site scripting

vulnerability

management screen

remote attackers

web script

html

vectors

mobile version color scheme

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

57.2%

JSON

Cross-site scripting (XSS) vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the “mobile version color scheme.”