Overview
- Description
- Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:liveworld:livechat:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "570FE3C5-652C-45EA-B52E-1C54E007F97C"
},
{
"criteria": "cpe:2.3:a:liveworld:livefocusgroup:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C27ECA5B-C132-4E5A-8A5C-AC9AA6702C6A"
},
{
"criteria": "cpe:2.3:a:liveworld:liveforum:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DB67E40-2D97-44F3-91EA-45838E36AD82"
},
{
"criteria": "cpe:2.3:a:liveworld:liveq_and_a:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90C8AD09-0746-42BC-B251-46289D52E651"
}
],
"operator": "OR"
}
]
}
]