CVE-2012-4052 | BDVDB-2026-51688 Detail

Description#

Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.jease.org/download/2.9/
https://www.htbridge.com/advisory/HTB23104
https://groups.google.com/forum/?fromgroups#%21topic/jease/2BHaDww-5ac%5B1-25%5D

Exploit#

No public exploit known

History#

Version 12012-08-20Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.