CVE-2005-3085

Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) topic parameters.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2005-09-27

Last modified

2024-09-17

Affected products

• Rss Syndicator Module (Riverdark Studios)

References

• http://securitytracker.com/id?1014969