← Database

CVE-2009-2376

MEDIUM CVSS: 4.3 Published: 2009-07-08 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module.

Affected Platforms

Tangocms Tangocms

Weakness Type

CWE-79

References