CVE-2012-5296
Mavili Guestbook - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Mavili Guestbook, as released in November 2007, allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) approve.asp, (2) delete.asp, (3) edit.asp, or (4) edit2.asp.
References (4)
Scores
EPSS
0.0029
EPSS Percentile
51.6%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
mavili_guestbook_project/mavili_guestbook
n/a/n/a
Timeline
Published
Oct 04, 2012
Tracked Since
Feb 18, 2026