← Database

CVE-2009-2581

MEDIUM CVSS: 4.3 Published: 2009-07-23 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in modifier.php in EditeurScripts EsNews 1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Affected Platforms

Editeurscripts Esnews

Weakness Type

CWE-79

References