Maianscriptworld » Maian Weblog : Security Vulnerabilities, CVEs,
Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) subject parameter in a contact action to index.php.
Max CVSS
4.3
EPSS Score
0.19%
Published
2015-01-13
Updated
2017-09-08
Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to admin/index.php in a blogs search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action.
Max CVSS
4.3
EPSS Score
0.25%
Published
2008-05-14
Updated
2018-10-11
2 vulnerabilities found