CVE-2009-4093
Simplog 0.9.3.2 - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters.
Exploits (1)
Scores
EPSS
0.0208
EPSS Percentile
83.8%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
simplog/simplog
n/a/n/a
Timeline
Published
Nov 29, 2009
Tracked Since
Feb 18, 2026