CVE-2015-2986 Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rakuto rktsns2 | = 0.2.2b | No fix listed |
References
- JVN#24692261 third-party-advisory vendor-advisory
- JVNDB-2015-000302 third-party-advisory vendor-advisory