CVE-2009-4461: XSS

Published Dec 30, 2009

Updated

Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to (1) contact.php, (2) login.php, and (3) search.php.

Affected Software

1 affected component

flatpress flatpress=0.909

Event History

Dec 30, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4461?

CVE-2009-4461 has a medium severity rating as it allows for cross-site scripting attacks on affected systems.

How do I fix CVE-2009-4461?

To fix CVE-2009-4461, upgrade FlatPress to the latest version that addresses these vulnerabilities.

Which files are affected by CVE-2009-4461?

CVE-2009-4461 affects contact.php, login.php, and search.php files in FlatPress 0.909.

Who can be impacted by CVE-2009-4461?

Remote attackers can exploit CVE-2009-4461 to inject arbitrary web scripts or HTML into affected FlatPress installations.

What can attackers achieve using CVE-2009-4461?

Attackers can use CVE-2009-4461 to execute malicious scripts in the context of users' web browsers, potentially leading to data theft or session hijacking.