Unscored CVE-2008-6879 EUVD-2008-6839GHSA-pmpw-mfxc-wvmv

Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or …

Published Jul 30, 2009 · Updated Sep 17, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Apache Roller 2.3, 3.0, 3.1, and 4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action.

References

31523 third-party-advisory
51151 vdb-entry
http://svn.apache.org/viewvc?view=rev&revision=668737
33110 vdb-entry
http://issues.apache.org/roller/browse/ROL-1766