Security Advisory

CVE-2010-5002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-11-01 22:00:00
Last updated 2024-08-07 04:09:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.