Security Advisory

CVE-2009-2937

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-09-18 10:00:00
Last updated 2024-09-17 04:08:47
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.