Unscored CVE-2007-3202 EUVD-2007-3194GHSA-4w74-rhp7-w923

Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML v…

Published Jun 12, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML via URL-encoded HTML composed of a frameset in which a frame has a SRC attribute pointing to a JavaScript document.

References

37330 vdb-entry
2792 third-party-advisory
20070611 Webwiz vulnerable mailing-list
24419 vdb-entry