TI-2007-03157 CVE-2007-3261 · GHSA-5q7r-x43f-873jCross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6…Priority LOW 23Cross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01263 · Published 2007-06-19 · No fix listed