Unscored CVE-2002-2350 EUVD-2002-2328GHSA-jc89-q7gp-883v

Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject…

Published Oct 29, 2007 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.

References

20021010 XSS bug in Zorum 2.4 mailing-list
zorum-zusershow-xss(10337) vdb-entry