XSS in Kasseler-Cms Kasseler Cms

CVE-2009-4822

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kasseler CMS 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) do, (2) id, and (3) uname parameters.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.

Affected products

Kasseler-cms Kasseler_cms — versions 1.3.4
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_XF)