CVE-2009-2376

CVE-2009-2376

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://dev.tangocms.org/issues/show/140 http://dev.tangocms.org/repositories/diff/tangocms?rev=2372 http://secunia.com/advisories/35642 https://exchange.xforce.ibmcloud.com/vulnerabilities/51432 http://tangocms.org/changelog