Unscored CVE-2005-3761 EUVD-2005-3756GHSA-f37w-3rf5-92hr

Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script o…

Published Nov 22, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) the parameters to the installer.

References

20051119 [security - exponentcms] mailing-list
17655 third-party-advisory
17505 third-party-advisory