XSS in Cms.tut.su Cms Chainuk

CVE-2009-2330

Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.