← Database

CVE-2009-2771

MEDIUM CVSS: 4.3 Published: 2009-08-14 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/.

Affected Platforms

Freearcadescript Free Arcade Script

Weakness Type

CWE-79

References