2 matches found
CVE-2011-1670
Cross-site scripting XSS vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the subject parameter to posturl/edit...
4.3CVSS5.8AI score0.01741EPSS
SaveExploits3References6
CVE-2011-1670: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in actions/add.php in InTerra Blog Machine 1.84, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the subject parameter to posturl/edit...
4.3CVSS6AI score0.01741EPSS
SaveExploits3References2
20