CVE-2008-7039
Gelatocms - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in admin/comments.php in Gelato CMS 0.95 allows remote attackers to inject arbitrary web script or HTML via the content parameter in a comment. NOTE: some of these details are obtained from third party information.
References (4)
Scores
EPSS
0.0029
EPSS Percentile
51.6%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
gelatocms/gelatocms
n/a/n/a
Timeline
Published
Aug 24, 2009
Tracked Since
Feb 18, 2026