CVE-2007-5227
Blackboard Learning And Community Post Systems - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the (1) subject_t and (2) body_text parameters. NOTE: vector 2 requires bypassing a client-side security mechanism that attempts to block XSS sequences.
Scores
EPSS
0.0047
EPSS Percentile
64.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
blackboard/blackboard_learning_and_community_post_systems
Timeline
Published
Oct 05, 2007
Tracked Since
Feb 18, 2026