← Database

CVE-2003-0404

MEDIUM CVSS: 4.3 Published: 2003-06-30 Modified: 2026-06-16

Description

Multiple Cross Site Scripting (XSS) vulnerabilities in Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, allow remote attackers to insert arbitrary HTML and script via text variables, as demonstrated using the errInfo parameter of the default login template.

Affected Platforms

Vignette StoryserverVignette VignetteVignette Content Suite

Weakness Type

NVD-CWE-Other

References