XSS in Elkagroup Elkapax Cms

CVE-2009-2930

Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.012 (65.1th percentile) — read the EPSS interpretation.