CVE-2012-5866

Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter

published October 20, 2014

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01201 · 67.8th percentile
Published
2014-10-20T15:00Z
EPSS history
Timeline
  • 20 OCT 15:00Z
    Cross-site scripting (XSS) vulnerability in include.php in Achievo 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the field parameter
    cvelistv5