CVE-2002-2386

Cross-site scripting XSS vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag...

CVE-2002-2386

CVE-2002-2386 describes a cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0. The issue occurs when online question development allows a javascript: URL in the SRC attribute of an IMG tag, enabling remote attackers to inject arbitrary script/HTML. The provided documents id...