CVE-2002-1683

2005-06-2104:00:00

mitre

www.cve.org

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

61.4%

JSON

Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.

References

online.securityfocus.com/archive/1/281141

www.securityfocus.com/bid/5179

exchange.xforce.ibmcloud.com/vulnerabilities/9514