CVE-2011-3383

KENT-WEB WEB FORUM < 5.1 - Cross-Site Scripting via Output Web Page

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in KENT-WEB WEB FORUM 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to "the web page to be output."

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN36684331/index.html
Third Party Advisory, VDB Entry third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000080

Scores

EPSS 0.0103
EPSS Percentile 59.8%

Details

CWE
CWE-79
Status published
Products (1)
kent-web/web_forum < 5.1
Published Oct 24, 2011
Tracked Since Feb 18, 2026