CVE-2002-2230
Ikonboard - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a ".gif" or ".jpg" string, a variant of CVE-2002-0328.
Scores
EPSS
0.0025
EPSS Percentile
47.6%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
ikonboard/ikonboard
Timeline
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026