Cross site scripting

2008-08-2614:41:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

JSON

Cross-site scripting (XSS) vulnerability in search/index.php in Five Star Review Script allows remote attackers to inject arbitrary web script or HTML via the words parameter in a search action.

References

secunia.com/advisories/31585

securityreason.com/securityalert/4184

www.securityfocus.com/bid/30808

exchange.xforce.ibmcloud.com/vulnerabilities/44637

www.exploit-db.com/exploits/6294