CVE-2008-3735

PHPizabi <848 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in index.php in PHPizabi before 848 Core HotFix Pack 3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a blogs.search action.

Scores

EPSS 0.0025
EPSS Percentile 48.5%

Classification

CWE
CWE-79
Status draft

Affected Products (1)

phpizabi/phpizabi

Timeline

Published Aug 20, 2008
Tracked Since Feb 18, 2026