Back

CVE-2003-1145

Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows remote attackers to inject arbitrary web script or HTML via the listing parameter.

Published: Nov 3, 2003 Modified: Jun 16, 2026

CVSS Metrics

GitHub Security Advisory GHSA-gcvw-22f5-2wvr

Cross-site scripting (XSS) vulnerability in friendmail.php in OpenAutoClassifieds 1.0 allows...

Risk Scores

CVSS Score 6.8 / 10
EPSS Score 4.22%

Top 10% most likely to be exploited

Threat Score 28.5 / 100

Data Sources

NVD EPSS GitHub