TI-2006-00447 CVE-2006-0461 · GHSA-xvcw-fcfv-34ggCross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1…Priority LOW 24Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer).CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02059 · Published 2006-01-27 · No fix listed