CVE-2012-5702

Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1)…

published October 21, 2014

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) callback parameter in a color_selector action, (2) field parameter in a date_format action, or (3) company_name parameter in an addedit action to index.php. NOTE: the date parameter vector is already covered by CVE-2008-3886.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02081 · 81.3th percentile
Published
2014-10-21T14:00Z
EPSS history
Timeline
  • 21 OCT 14:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in dotProject before 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1)…
    cvelistv5