Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Y-blog Component: Yblog Clear all filters
TI-2008-02550 CVE-2008-2668 · GHSA-ch2x-2fc5-pg69

Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01766 Published 2008-06-12 No fix listed CWE-79