← Database

CVE-2002-1335

MEDIUM CVSS: 4.3 Published: 2002-12-11 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files or cookies.

Affected Platforms

W3M W3M

Weakness Type

NVD-CWE-Other

References