TI-2008-03042 CVE-2008-3180 · GHSA-gmpc-xgf5-4prfMultiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in…Priority LOW 23Multiple cross-site scripting (XSS) vulnerabilities in upload/file/language_menu.php in ContentNow CMS 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) pageid parameter or (2) PATH_INFO.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01571 · Published 2008-07-15 · No fix listed CWE-79