Back
CVE-2003-0283
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject arbitrary web script and HTML tags via a message with a "<<" before a tag name in the (1) subject, (2) author's name, or (3) author's e-mail.
Published: Jun 16, 2003
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| phorum | phorum | * |
GitHub Security Advisory GHSA-4g5m-vrw9-vcj9
Cross-site scripting (XSS) vulnerability in Phorum before 3.4.3 allows remote attackers to inject...
References (8)
- http://marc.info/?l=bugtraq&m=105251043821533&w=2
- http://marc.info/?l=bugtraq&m=105251421925394&w=2
- http://www.securityfocus.com/bid/7545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11974
- http://marc.info/?l=bugtraq&m=105251043821533&w=2
- http://marc.info/?l=bugtraq&m=105251421925394&w=2
- http://www.securityfocus.com/bid/7545
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11974
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
3.96%
Top 10% most likely to be exploited
Threat Score
28.4 / 100
Data Sources
NVD
EPSS
GitHub