CVE-2008-6094

Celoxis Technologies Celoxis - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in user.do in Celoxis Technologies Celoxis allows remote attackers to inject arbitrary web script or HTML via the ni.smessage parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by teuquooch1seero · textwebappsjava
https://www.exploit-db.com/exploits/32448

References (4)

Scores

EPSS 0.0039
EPSS Percentile 59.9%

Classification

CWE
CWE-79
Status published

Affected Products (2)

celoxis/celoxis
n/a/n/a

Timeline

Published Feb 09, 2009
Tracked Since Feb 18, 2026