MEDIUM
Multiple cross-site scripting (XSS) vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) Program name, (2) File link, (3) Author name (4) Author e-mail address, (5) File size, (6) Version, or (7) Home page variables
Published Mar 2, 2005
4.3
MEDIUMCVSS 2.0
EPSS 1.16%
Description
Affected products
Remediation
Metrics
References (3)
Change history (0)
No recorded changes yet.