Unscored CVE-2002-0217 EUVD-2002-0214GHSA-9w75-5g59-wmwq

Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on …

Published May 3, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.

References

3981 vdb-entry
20020129 Xoops Private Message System Script injection mailing-list
xoops-private-message-css(8025) vdb-entry
3978 vdb-entry
xoops-pmlite-image-css(8030) vdb-entry