Vulnerability in Goollery

CVE-2004-2246

Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php.

EPSS: 0.027 (84.3th percentile) — read the EPSS interpretation.

Affected products

Goollery — versions 0.3
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, Exploit, Patch, vdb-entry)
cve@mitre.org (Exploit, x_refsource_MISC)