2 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a memberprofile action to index.php...
4.3CVSS6.1AI score0.01465EPSS
SaveExploits2References2Affected Software1
CVE-2014-9004: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in vldPersonals before 2.7.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a memberprofile action to index.php...
4.3CVSS6AI score0.01465EPSS
SaveExploits2References2
20