Chatelao: >> Php Address Book >> 7.0 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in preferences.php in PHP Address Book 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the from parameter. NOTE: the index.php vector is already covered by CVE-2008-2566.
CVSS Score
4.3
EPSS Score
0.089
Published
2012-09-09