CVE-2007-0763 Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the Autor field.
MediumCVSS 6.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the Autor field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f3site | = 2.1 | No fix listed |
References
- 34668 vdb-entry
- 22379 exploit vdb-entry
- f3site-autor-xss(32188) vdb-entry
- 3255 exploit