Unscored CVE-2008-4898 EUVD-2008-4877GHSA-cfj7-94v2-cwfv

Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the r…

Published Nov 4, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action.

References

32511 third-party-advisory
32069 vdb-entry
rateme-rate-xss(46202) vdb-entry
http://holisticinfosec.org/content/view/85/45/