Unscored CVE-2015-2957 EUVD-2015-3041GHSA-66xr-rxxv-x3mw

Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attacke…

Published Jun 13, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

JVNDB-2015-000082 third-party-advisory
http://jvn.jp/en/jp/JVN20879350/995646/index.html
JVN#20879350 third-party-advisory
75077 vdb-entry