Skip to content

CVE-2009-4682 Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action.

MediumCVSS 4.3 EPSS 1.4% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

Cross-site scripting (XSS) vulnerability in vote.php in Good/Bad Vote allows remote attackers to inject arbitrary web script or HTML via the id parameter in a vote action.

Affected products

ProductAffected versionsFixed in
scriptsez goodbad vote All versions No fix listed

References

  • 35835 third-party-advisory vendor-advisory
  • 9185 exploit
  • 55919 exploit vdb-entry