CVE-2013-4703

Cybozu Office < 9.3.0 - Cross-Site Scripting in Top-Page Customization Feature

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://cs.cybozu.co.jp/information/20130909up11.php
Third Party Advisory third-party-advisory x_refsource_jvndb
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000082
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN53014207/index.html

Scores

EPSS 0.0030
EPSS Percentile 53.1%

Details

CWE
CWE-79
Status published
Products (1)
cybozu/office < 9.3.0
Published Sep 10, 2013
Tracked Since Feb 18, 2026