CVE-2002-2230

2007-10-1420:00:00

mitre

www.cve.org

cross-site scripting

ikonboard 3.1.1

remote attackers

AI Score

5.6

Confidence

High

EPSS

0.02

Percentile

89.0%

JSON

Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a “.gif” or “.jpg” string, a variant of CVE-2002-0328.