cbcvebase.

Jce-Tech Auction Rss Content Script vulnerabilities

1 known vulnerability affecting jce-tech/auction_rss_content_script.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2009-3195P4MEDIUMCVSS 4.3PoCv3.02009-09-15
CVE-2009-3195 [MEDIUM] CWE-79 CVE-2009-3195: Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.
nvd
Jce-Tech Auction Rss Content Script vulnerabilities | cvebase