← Database

CVE-2005-4401

MEDIUM CVSS: 4.3 Published: 2005-12-20 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Lutece 1.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the query parameter.

Affected Platforms

Lutece Lutece

Weakness Type

NVD-CWE-Other

References