XSS in Vigilecms

CVE-2007-6085

Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the (1) vedipm or (2) live_chat module.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.015 (71.9th percentile) — read the EPSS interpretation.

Affected products

  • Vigilecms — versions 1.4
  • N/a — versions n/a

Weakness classification (CWE)

References