2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and b magpiesimple.php in external/magpierss/scripts/, the 2 rssurl parameter to c magpieslashbox.p...
4.3CVSS6.1AI score0.01823EPSS
SaveExploits3References7Affected Software1
CVE-2007-2337: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and b magpiesimple.php in external/magpierss/scripts/, the 2 rssurl parameter to c magpieslashbox.p...
4.3CVSS5.9AI score0.01823EPSS
SaveExploits3References2
20