← Database

CVE-2009-4320

MEDIUM CVSS: 4.3 Published: 2009-12-14 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Affected Platforms

Lythgoes The Next Generation Of Genealogy Sitebuilding

Weakness Type

CWE-79

References