← Database

CVE-2007-6301

MEDIUM CVSS: 4.3 Published: 2007-12-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the type parameter.

Affected Platforms

Open Newsletter Open Newsletter

Weakness Type

CWE-79

References