Unscored CVE-2015-2976 EUVD-2015-3059GHSA-h655-555w-3pm8

Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web scr…

Published Jul 25, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted HTML document or (2) a crafted URL that is mishandled during access-log analysis.

References

http://lite.research-artisan.net/main/download
JVNDB-2015-000104 third-party-advisory
JVN#58020495 third-party-advisory