CVE-2012-3871

Openconstructor - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in data/hybrid/i_hybrid.php in Open Constructor 3.12.0 allows remote authenticated users to inject arbitrary web script or HTML via the header parameter.

References (1)

Scores

EPSS 0.0022
EPSS Percentile 44.8%

Details

CWE
CWE-79
Status published
Products (2)
openconstructor_project/openconstructor
n/a/n/a
Published Dec 28, 2012
Tracked Since Feb 18, 2026