TI-2012-03694 CVE-2012-4336 · GHSA-f725-96vh-q7pmMultiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and…Priority LOW 23Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flogr 2.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) an arbitrary parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01631 · Published 2012-09-15 · No fix listed CWE-79