← Database

CVE-2009-1448

MEDIUM CVSS: 4.3 Published: 2009-04-27 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in apricot.php in LovPop.net APRICOT, probably 1.20, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

Affected Platforms

Lovpop Apricot

Weakness Type

CWE-79

References