Cross site scripting

2009-03-0618:30:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.3%

JSON

The CGI framework in Kaya 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct cross-site scripting (XSS) attacks via unspecified vectors.

CPENameOperatorVersion
kayaeq0.4.0

CPE	Name	Operator	Version
	kaya	eq	0.4.0

References

kayalang.org/about/news

osvdb.org/45882

secunia.com/advisories/30466

exchange.xforce.ibmcloud.com/vulnerabilities/42774