CVE-2008-5858

KnowledgeTree <3.5.4a - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281.

References (4)

[Vendor Advisory] http://secunia.com/advisories/33277

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/47529

[Third Party Advisory] http://wiki.knowledgetree.com/Version_3.5.4a#Security

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32920

Scores

EPSS 0.0029

EPSS Percentile 51.6%

Classification

CWE

CWE-79

Status published

Affected Products (32)

knowledgetree_document_management/knowledgetree_document_management < 3.5.4

knowledgetree_document_management/knowledgetree_document_management

... and 17 more

Timeline

Published Jan 06, 2009

Tracked Since Feb 18, 2026