← Database

CVE-2009-3147

MEDIUM CVSS: 4.3 Published: 2009-09-10 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in showproduct.php in ReviewPost Pro vB3 allows remote attackers to inject arbitrary web script or HTML via the date parameter.

Affected Platforms

Allenthusiast Reviewpost Php Pro

Weakness Type

CWE-79

References