Vulnerability Details CVE-2005-1945
Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.2%
CVSS Severity
CVSS v2 Score 4.3
References
- http://marc.info/?l=bugtraq&m=111833601302752&w=2
- http://secunia.com/advisories/15626
- http://www.gulftech.org/?node=research&article_id=00078-06072005
- http://marc.info/?l=bugtraq&m=111833601302752&w=2
- http://secunia.com/advisories/15626
- http://www.gulftech.org/?node=research&article_id=00078-06072005
Products affected by CVE-2005-1945
-
cpe:2.3:a:invision_power_services:invision_community_blog:1.0
-
cpe:2.3:a:invision_power_services:invision_community_blog:1.1