CVE-2009-0736

Pebble <2.3.2 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in Pebble before 2.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (4)

[Vendor Advisory] http://secunia.com/advisories/33888

[Patch, Vendor Advisory] http://sourceforge.net/forum/forum.php?forum_id=917656

[Patch, Vendor Advisory] http://sourceforge.net/project/shownotes.php?release_id=660130

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/33733

Scores

EPSS 0.0031

EPSS Percentile 53.8%

Classification

CWE

CWE-79

Status published

Affected Products (41)

simon_brown/pebble < 2.3.1

simon_brown/pebble

... and 26 more

Timeline

Published Feb 25, 2009

Tracked Since Feb 18, 2026