CVE-2010-1724

Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web…

published May 5, 2010

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) func parameter to index.php, or the (2) lang parameter to index.php, which is not properly handled by ZLanguage.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04103 · 90.7th percentile
Published
2010-05-05T14:00Z
EPSS history
Timeline
  • 05 MAY 14:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to inject arbitrary web…
    cvelistv5