CVE-2007-2555

Podium CMS - XSS

Title source: llm

Description

Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).

Scores

EPSS 0.0035
EPSS Percentile 57.0%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

podium_cms/podium_cms

Timeline

Published May 09, 2007
Tracked Since Feb 18, 2026