TI-2007-02948 CVE-2007-3049 · GHSA-4rjw-m2mm-7r9gCross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager…Priority LOW 23Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01485 · Published 2007-06-06 · No fix listed