XSS in Puresw Lore
CVE-2008-3353
Multiple cross-site scripting (XSS) vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the (1) article comments feature and the (2) search log feature.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.010 (60.3th percentile) — read the EPSS interpretation.
Affected products
- Puresw Lore — versions 1.0.2, 1.0.3, 1.0.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, URL Repurposed)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)