cbcvebase.
CVE-2003-0404
published 2003-06-30

CVE-2003-0404: Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML…

PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
1.98%
78.0th percentile
Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

Affected

7 ranges
VendorProductVersion rangeFixed in
vignettecontent_suite——
vignettecontent_suite——
vignettecontent_suite——
vignettestoryserver——
vignettestoryserver——
vignettestoryserver——
vignettevignette——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.