CVE-2002-0217

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-05-16 · updated 2026-06-16

Description

Cross-site scripting (CSS) vulnerabilities in the Private Message System for XOOPS 1.0 RC1 allow remote attackers to execute Javascript on other web clients via (1) the Title field or a Private Message Box or (2) the image field parameter in pmlite.php.

Affected products

Xoops: 1.0_rc1

References

http://online.securityfocus.com/archive/1/252828
http://www.iss.net/security_center/static/8025.php
http://www.iss.net/security_center/static/8030.php
http://www.securityfocus.com/bid/3978
http://www.securityfocus.com/bid/3981
http://online.securityfocus.com/archive/1/252828
http://www.iss.net/security_center/static/8025.php
http://www.iss.net/security_center/static/8030.php
http://www.securityfocus.com/bid/3978
http://www.securityfocus.com/bid/3981

Get alerted when CVE-2002-0217 or the next vulnerability affects your stack