CVE-2003-0495

The CVE-2003-0495 entry concerns LedNews 0.7 with a cross-site scripting (XSS) flaw that lets an attacker inject arbitrary web script via a news item. The vulnerability is described as enabling the execution of malicious HTML/JavaScript in victims’ browsers, potentially enabling cookie theft or o...