Description
Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form). NOTE: some of these details are obtained from third party information.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by YEnH4ckEr · textwebappsphp
https://www.exploit-db.com/exploits/8577
References (2)
Core 2
Core References
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/8577
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34943
Scores
EPSS
0.0051
EPSS Percentile
66.6%
Details
CWE
CWE-79
Status
published
Products (1)
gowondesigns/leap
0.1.4
Published
May 11, 2009
Tracked Since
Feb 18, 2026