CVE-2015-2976

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-07-25 · updated 2026-06-17
Weakness: CWE-79

Description

Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted HTML document or (2) a crafted URL that is mishandled during access-log analysis.

Affected products

Research-Artisan Research Artisan Lite: through 1.17

References

http://jvn.jp/en/jp/JVN58020495/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000104
http://lite.research-artisan.net/main/download
http://jvn.jp/en/jp/JVN58020495/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000104
http://lite.research-artisan.net/main/download

Get alerted when CVE-2015-2976 or the next vulnerability affects your stack