Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.

Threat-Mapped Scoring

Score: 0.0

Priority: Unclassified

EPSS

Score: 0.00855
Percentile: 0.74006

CVSS Scoring

Affected Products

• cpe:2.3:a:open_source_development_network:slashcode:2.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:open_source_development_network:slashcode:2.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:open_source_development_network:slashcode:2.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:open_source_development_network:slashcode:2.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:open_source_development_network:slashcode:2.2.5:*:*:*:*:*:*:*

← Back to Home