CVE-2015-2957 Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vec...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| igreks milkystep light | <= 0.94 | No fix listed |
| igreks milkystep professional | <= 1.82 | No fix listed |
| igreks milkystep professional oem | <= 1.82 | No fix listed |
References
- jvn.jp
- JVN#20879350 third-party-advisory vendor-advisory
- JVNDB-2015-000082 third-party-advisory vendor-advisory
- 75077 vdb-entry