CVE-2007-2335

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-27 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the RSS feed reader functionality in Lunascape 4.1.3 build2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Lunascape: 4.1, 4.1.1, 4.1.2, 4.1.3

References

http://jvn.jp/jp/JVN%2336628264/index.html
http://lunapedia.lunascape.jp/index.php?title=Lunascape_4#2007.2F04.2F25_ver_4.2.0
http://osvdb.org/35364
http://secunia.com/advisories/25000
http://www.securityfocus.com/bid/23665
http://www.vupen.com/english/advisories/2007/1538
https://exchange.xforce.ibmcloud.com/vulnerabilities/34074
http://jvn.jp/jp/JVN%2336628264/index.html
http://lunapedia.lunascape.jp/index.php?title=Lunascape_4#2007.2F04.2F25_ver_4.2.0
http://osvdb.org/35364
http://secunia.com/advisories/25000
http://www.securityfocus.com/bid/23665

Get alerted when CVE-2007-2335 or the next vulnerability affects your stack