CVE-2007-3291 Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in artic...
MediumCVSS 4.3
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an article name, possibly involving the titulo parameter in article.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| livecms | = 3.0 | No fix listed |
| livecms | = 3.3 | No fix listed |
| livecms | = 3.3_rc1 | No fix listed |
| livecms | = 3.3_rc2 | No fix listed |
| livecms | = 3.4 | No fix listed |
| livecms | = 3.4a | No fix listed |
References
- 37491 vdb-entry
- 25744 third-party-advisory vendor-advisory
- 24580 vdb-entry
- livecms-articlename-xss(35148) vdb-entry
- 4082 exploit