CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary…

published March 18, 2003

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01630 · 75.9th percentile
Published
2003-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary…
    cvelistv5