CVE-2008-3180

CVE-2008-3180 affects ContentNow CMS 1.4.1. The vulnerability is described as multiple cross-site scripting (XSS) flaws in upload/file/language_menu.php, exploitable via the (1) pageid parameter or (2) PATH_INFO. The NVD entry lists a base CVSS v2 score of 4.3 (MEDIUM) with network attack vector,...