Cross site scripting

2012-03-1918:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to inject arbitrary web script or HTML via the (1) url bar or (2) picture bar.

CPENameOperatorVersion
osqaeq3.0.98

CPE	Name	Operator	Version
	osqa	eq	3.0.98

References

archives.neohapsis.com/archives/bugtraq/2012-02/0164.html

www.securityfocus.com/bid/52184

www.vulnerability-lab.com/get_content.php?id=461