CVE-2008-2553

Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote…

published June 5, 2008

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote attackers to inject arbitrary web script or HTML via the userfield parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01562 · 74.9th percentile
Published
2008-06-05T20:21Z
EPSS history
Timeline
  • 05 JUN 20:21Z
    Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R_2_5_0_94 and earlier allows remote…
    cvelistv5