Back

CVE-2001-0991

Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote attackers to execute arbitrary script on other clients via an incorrect URL containing the malicious script, which is printed back in an error message.

Published: Jul 24, 2001 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (4)

Vendor Product Version
scott_r._lemmon proxomitron_naoko-4 beta1
scott_r._lemmon proxomitron_naoko-4 beta2
scott_r._lemmon proxomitron_naoko-4 beta3
scott_r._lemmon proxomitron_naoko-4 beta4

GitHub Security Advisory GHSA-g8q9-m36q-5j85

Cross-site scripting vulnerability in Proxomitron Naoko-4 BetaFour and earlier allows remote...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 7.10%

Top 6% most likely to be exploited

Threat Score 32.1 / 100

Data Sources

NVD EPSS GitHub