Skip to content
OpenAdvisories
Unscored CVE-2015-0967 EUVD-2015-0975GHSA-gc8p-3455-wxwc

Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML …

Published Apr 18, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

Multiple cross-site scripting (XSS) vulnerabilities in SearchBlox before 8.2 allow remote attackers to inject arbitrary web script or HTML via (1) the search field in plugin/index.html or (2) the title field in the Create Featured Result form in admin/main.jsp.

References