CVE-2009-4379

Valarsoft Webmatic <3.0.3 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in Valarsoft Webmatic before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-2924.

References (3)

[Vendor Advisory] http://secunia.com/advisories/37735

[Patch] http://www.securityfocus.com/bid/37335

[Patch, Vendor Advisory] http://www.valarsoft.com/index.php?stage=0&section=5&newsID=165&action=6

Scores

EPSS 0.0032

EPSS Percentile 54.9%

Classification

CWE

CWE-79

Status published

Affected Products (12)

valarsoft/webmatic < 3.0.2

valarsoft/webmatic

n/a/n/a

Timeline

Published Dec 22, 2009

Tracked Since Feb 18, 2026