Unscored CVE-2013-5983 EUVD-2013-5813GHSA-hx6c-jgjx-4m3c

Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML vi…

Published Feb 6, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) "an" parameter to agenda.php or (2) cat parameter to mobile/thread.php.

References

http://packetstormsecurity.com/files/123747
guppy-cve20135983-xss(88247) vdb-entry
98841 vdb-entry
98880 vdb-entry
20131023 Cross-Site Scripting (XSS) in GuppY mailing-list
http://www.freeguppy.org/thread.php?lng=en&pg=244900&cat=200
https://www.htbridge.com/advisory/HTB23176