6.2 Medium
AI Score
Confidence
High
0.005 Low
EPSS
Percentile
76.0%
Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php.
osvdb.org/55862
packetstormsecurity.org/0907-exploits/eid-xss.txt
secunia.com/advisories/35838
www.securityfocus.com/bid/35701
exchange.xforce.ibmcloud.com/vulnerabilities/51722