CVE-2008-0400

Modern - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in header.tpl.php in the modern template for Singapore 0.10.1 allows remote attackers to inject arbitrary web script or HTML via the gallery parameter to default.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by trew · textwebappsphp
https://www.exploit-db.com/exploits/31044

Scores

EPSS 0.0029
EPSS Percentile 52.1%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

modern/modern
singapore/singapore

Timeline

Published Jan 23, 2008
Tracked Since Feb 18, 2026