CVE-2008-6433
Blueriver Sava Cms < 5.0 - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a search action.
References (5)
Scores
EPSS
0.0033
EPSS Percentile
55.5%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
blueriver/sava_cms
< 5.0
n/a/n/a
Timeline
Published
Mar 06, 2009
Tracked Since
Feb 18, 2026