Back

CVE-2003-0278

Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4 allows remote attackers to insert arbitrary web script via the file parameter.

Published: Jun 16, 2003 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (2)

Vendor Product Version
happycgi.com happymall 4.3
happycgi.com happymall 4.4

GitHub Security Advisory GHSA-xx47-qq34-9xqq

Cross-site scripting (XSS) vulnerability in normal_html.cgi in Happycgi.com Happymall 4.3 and 4.4...

Risk Scores

CVSS Score 6.8 / 10
EPSS Score 3.92%

Top 11% most likely to be exploited

Threat Score 28.4 / 100

Data Sources

NVD EPSS GitHub