5.8 Medium
AI Score
Confidence
High
0.004 Low
EPSS
Percentile
72.0%
Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter.
marc.info/?l=bugtraq&m=110461644407935&w=2
secunia.com/advisories/13695
www.securityfocus.com/bid/12114
exchange.xforce.ibmcloud.com/vulnerabilities/18705