CVE-2008-5720

Published Dec 26, 2008 CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-4479 Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
Github GHSA Github GHSA GHSA-m3p9-c7p3-xxmp Mayaa Cross-site Scripting vulnerability
History

No history.

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 11:04 AM
Reserved
Dec 26, 2008, 12:00 AM
Status
Modified
Published
Dec 26, 2008, 5:30 PM
Modified
Jun 16, 2026, 11:00 PM