2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...
4.3CVSS6.1AI score0.01765EPSS
SaveExploits3References6
CVE-2007-5480: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the 1 msg parameter to msg.jsp, and the 2 contentid parameter to tc/contents/home001.jsp...
4.3CVSS5.9AI score0.01765EPSS
SaveExploits3References2
20