Description
Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) content and (2) criteria parameters.
Unscored
CVE-2005-4407
EUVD-2005-4402GHSA-ppr8-xvjc-pg2w
Cross-site scripting (XSS) vulnerability in index.cfm in Mercury CMS 4.0 and earlier allows remote attackers to inject arbitrary web script…
Published Dec 20, 2005 · Updated Aug 7, 2024 · Assigned by mitre