CVE-2008-3572 in Pligg

Summary

by MITRE

Cross-site scripting (XSS) vulnerability in index.php in Pligg 9.9.5 allows remote attackers to inject arbitrary web script or HTML via the category parameter.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 08/10/2008
• Disclosure: 08/10/2008
• Moderation: accepted
• Entry: VDB-43615
• CPE: ready
• CWE: CWE-79 (confirmed)
• CVSS: 4.3 (VulDB)
• EPSS: 0.01102
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3572
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3572
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3572/