CVE-2009-1614
Gowondesigns Leap - XSS
Title source: ruleDescription
Multiple cross-site scripting (XSS) vulnerabilities in Leap CMS 0.1.4 allow remote attackers to inject arbitrary web script or HTML via (1) the msg parameter (aka the message in an article comment) or (2) the searchterm parameter (aka the search post form). NOTE: some of these details are obtained from third party information.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by YEnH4ckEr · textwebappsphp
https://www.exploit-db.com/exploits/8577
Scores
EPSS
0.0051
EPSS Percentile
66.2%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
gowondesigns/leap
n/a/n/a
Timeline
Published
May 11, 2009
Tracked Since
Feb 18, 2026