CVE-2010-3463
SantaFox 2.02 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in modules/search/search.class.php in SantaFox 2.02, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the search parameter to search.html.
References (4)
Scores
EPSS
0.0029
EPSS Percentile
51.7%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
santafox/santafox
n/a/n/a
Timeline
Published
Sep 17, 2010
Tracked Since
Feb 18, 2026