CVE-2008-6027

BLUEPAGE CMS <2.5 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.

Scores

EPSS 0.0033
EPSS Percentile 55.5%

Classification

CWE
CWE-79
Status published

Affected Products (3)

bluepage/bluepage_cms < 2.5
bluepage/bluepage_cms
n/a/n/a

Timeline

Published Feb 03, 2009
Tracked Since Feb 18, 2026