Cross site scripting

2007-02-0602:28:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.9%

JSON

Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the Autor field.

CPENameOperatorVersion
f3siteeq2.1

CPE	Name	Operator	Version
	f3site	eq	2.1

References

osvdb.org/34668

www.securityfocus.com/bid/22379

exchange.xforce.ibmcloud.com/vulnerabilities/32188

www.exploit-db.com/exploits/3255