XSS in Xzeroscripts Xzero Community Classifieds
CVE-2009-2893
Multiple cross-site scripting (XSS) vulnerabilities in index.php in XZero Community Classifieds 4.97.8 allow remote attackers to inject arbitrary web script or HTML via (1) the postevent parameter in a post action or (2) the _xzcal_y parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.
Affected products
- Xzeroscripts Xzero_community_classifieds — versions 4.97.8
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)