CVE-2007-1965: Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the…

PriorityP413medium4.3CVSS 2.0

AVNACMAuNCNIPAN

EPSS

1.02%

59.1th percentile

Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
exv2	content_management_system	<= 2.0.4.3	—
exv2	content_management_system	<= 2.0.5	—
exv2	exv2	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.