CVE-2009-1908 Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Skip 1.0.2 and earlier, and 1.1RC2 and earlier 1.1RC versions, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openskip skip | <= 1.0.2 | No fix listed |
| openskip skip | <= 1.1 | No fix listed |
| openskip skip | = 0.9 | No fix listed |
| openskip skip | = 1.0.0 | No fix listed |
| openskip skip | = 1.0.1 | No fix listed |
References
- dev.openskip.org
- JVN#43233160 third-party-advisory
- JVNDB-2009-000025 third-party-advisory
- portal.openskip.org
- 35041 third-party-advisory vendor-advisory
- 34898 vdb-entry