CVE-2009-4714

XOOPS Celepar - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the quiz module for XOOPS Celepar allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to cadastro_usuario.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by s4r4d0 · textwebappsphp
https://www.exploit-db.com/exploits/9249

Scores

EPSS 0.0100
EPSS Percentile 76.7%

Classification

CWE
CWE-79
Status published

Affected Products (2)

alexandre_amaral/xoops_celepar
n/a/n/a

Timeline

Published Mar 15, 2010
Tracked Since Feb 18, 2026