CVE-2008-3353 Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article....
MediumCVSS 4.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article comments feature and the (2) search log feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| puresw lore | <= 1.6.3 | No fix listed |
| puresw lore | = 1.0.2 | No fix listed |
| puresw lore | = 1.0.3 | No fix listed |
| puresw lore | = 1.0.4 | No fix listed |
| puresw lore | = 1.0.5 | No fix listed |
| puresw lore | = 1.0.6 | No fix listed |
| puresw lore | = 1.0.7 | No fix listed |
| puresw lore | = 1.0.8 | No fix listed |
| puresw lore | = 1.0.9 | No fix listed |
| puresw lore | = 1.1.0 | No fix listed |
| puresw lore | = 1.1.1 | No fix listed |
| puresw lore | = 1.1.2 | No fix listed |
| puresw lore | = 1.2.0 | No fix listed |
| puresw lore | = 1.2.1 | No fix listed |
| puresw lore | = 1.3.0 | No fix listed |
| puresw lore | = 1.4.0 | No fix listed |
| puresw lore | = 1.4.1 | No fix listed |
| puresw lore | = 1.4.2 | No fix listed |
| puresw lore | = 1.4.3 | No fix listed |
| puresw lore | = 1.5.0 | No fix listed |
| puresw lore | = 1.5.1 | No fix listed |
| puresw lore | = 1.5.2 | No fix listed |
| puresw lore | = 1.5.3 | No fix listed |
| puresw lore | = 1.5.4 | No fix listed |
| puresw lore | = 1.5.5 | No fix listed |
Show 7 more
| Product | Affected versions | Fixed in |
|---|---|---|
| puresw lore | = 1.5.6 | No fix listed |
| puresw lore | = 1.5.7 | No fix listed |
| puresw lore | = 1.5.8 | No fix listed |
| puresw lore | = 1.5.9 | No fix listed |
| puresw lore | = 1.6.0 | No fix listed |
| puresw lore | = 1.6.1 | No fix listed |
| puresw lore | = 1.6.2 | No fix listed |
References
- puresw.com url-repurposed
- 31217 third-party-advisory vendor-advisory
- 30367 vdb-entry
- lore-articlecomments-searchlog-xss(43985) vdb-entry