Vulnerability in Riverdark Studios Rss Syndicator Module
CVE-2005-3085
Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) topic parameters.
EPSS: 0.010 (59.2th percentile) — read the EPSS interpretation.
Affected products
- Riverdark_studios Rss_syndicator_module — versions 2.1.7
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)