XSS in Xoops Rmsoft Gallery System

CVE-2008-1064

Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows remote attackers to inject arbitrary web script or HTML via the q parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.

Affected products

Xoops Xoops_rmsoft_gallery_system — versions 2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, x_refsource_MISC)