CVE-2011-1330 Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified ve...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in WeblyGo 5.0 Pro/LE, 5.02 Pro/LE, 5.03 Pro/LE, 5.04 Pro/LE, and 5.10 Pro/LE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kbs weblygo | = 5.0 | No fix listed |
| kbs weblygo | = 5.02 | No fix listed |
| kbs weblygo | = 5.03 | No fix listed |
| kbs weblygo | = 5.04 | No fix listed |
| kbs weblygo | = 5.10 | No fix listed |
References
- JVN#43386477 third-party-advisory
- JVNDB-2011-000042 third-party-advisory
- 44994 third-party-advisory vendor-advisory
- www.kbs.co.jp
- 48338 vdb-entry