XSS in Fswiki Freestyle Wiki

CVE-2008-3023

Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.6.2 and earlier, and 3.6.3 dev3 and earlier development versions, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2005-1799.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.118 (95.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (Third Party Advisory, x_refsource_JVN, third-party-advisory)
  • cve@mitre.org (Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_CONFIRM)
  • cve@mitre.org (x_refsource_JVNDB, VDB Entry, Third Party Advisory, third-party-advisory)