Vulnerabilities

TI-2007-00872 CVE-2007-0896 · GHSA-vmm5-923q-2xmw

Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++…

LOW 25

Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to inject arbitrary web script or HTML via a "<SCRIPT/=''SRC='" sequence in an RSS fe…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02736 Published 2007-02-13 No fix listed CWE-79

TI-2006-04552 CVE-2006-4712 · GHSA-cjj3-jhjg-w3f9

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demons…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02242 Published 2006-09-12 No fix listed CWE-79

TI-2006-04551 CVE-2006-4711 · GHSA-cwrg-cg45-mwq6

Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01246 Published 2006-09-12 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++…

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers…

Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to…