CVE-2002-1458

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary…

published March 18, 2003

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01877 · 79.3th percentile
Published
2003-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary…
    cvelistv5