3 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...
4.3CVSS6.1AI score0.01464EPSS
SaveExploits3References2Affected Software1
CVE-2013-6808
Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...
5.6AI score0.01464EPSS
SaveExploits3References2
CVE-2013-6808: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php...
4.3CVSS5.9AI score0.01464EPSS
SaveExploits3References2
20