Vulnerabilities > Toenda Software Development > Toendacms > 1.5.3

DATE CVE VULNERABILITY TITLE RISK
2007-04-13 CVE-2007-1872 HTML Injection vulnerability in Toenda Software Development Toendacms 1.5.3
Cross-site scripting (XSS) vulnerability in toendaCMS 1.5.3 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search id.
4.3