CVE-2008-3367 Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email pa...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in RTE_popup_link.asp in Web Wiz Rich Text Editor (RTE) 3.x and 4.x before 4.03 allows remote attackers to inject arbitrary web script or HTML via the email parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webwizguide web wiz rich text editor | <= 4.02 | No fix listed |
| webwizguide web wiz rich text editor | = 3 | No fix listed |
| webwizguide web wiz rich text editor | = 4.0 | No fix listed |
| webwizguide web wiz rich text editor | = 4.01 | No fix listed |
References
- depo2.nm.ru exploit
- 31272 third-party-advisory vendor-advisory
- 4055 third-party-advisory
- 20080727 Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02 mailing-list
- 30408 vdb-entry
- ADV-2008-2210 vdb-entry