CVE-2002-1802 Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.
MediumCVSS 4.3
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xoops | = 1.0_rc3 | No fix listed |
References
- 20020924 Xoops RC3 script injection vulnerability exploit mailing-list
- cms-news-image-xss(10173) patch vdb-entry
- 20020926 Re: Xoops RC3 script injection vulnerability fixed mailing-list
- 5785 exploit patch vdb-entry