← Database

CVE-2002-1802

MEDIUM CVSS: 4.3 Published: 2002-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.

Affected Platforms

Xoops Xoops

Weakness Type

NVD-CWE-Other

References