← Database

CVE-2010-1112

MEDIUM CVSS: 4.3 Published: 2010-03-25 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in cat.php in KloNews 2.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter.

Affected Platforms

Tristan Barczyk Klonews

Weakness Type

CWE-79

References