Postnuke Software Foundation : Security Vulnerabilities, CVEs, (XSS) CVSS score >= 5
Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
5.1
EPSS Score
1.60%
Published
2007-01-19
Updated
2008-11-13
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
Max CVSS
7.5
EPSS Score
0.65%
Published
2002-08-12
Updated
2008-09-05
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.
Max CVSS
5.0
EPSS Score
4.74%
Published
2002-07-03
Updated
2017-07-11
3 vulnerabilities found