medium4.3
CVE-2009-4348
Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to inject arbitrary web script or HTML …
Impact
Cross-site scripting (XSS) vulnerability in index.php in Harold Bakker's NewsScript (HB-NS) 1.3 allows remote attackers to inject arbitrary web script or HTML via the topic parameter in a topic action, a different vector than CVE-2006-2146.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Haroldbakker | Hb-Ns | Version 1.3 |