Description
Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.
Unscored
CVE-2012-4052
EUVD-2012-3996GHSA-pmqw-2h2f-3459
Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrar…
Published Aug 20, 2012 · Updated Sep 16, 2024 · Assigned by mitre