CVE-2004-2656

no score yetEPSS 1.4%

open source development network slashcode: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
Published: 2004-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

open_source_development_network:slashcode

References

http://archives.neohapsis.com/archives/bugtraq/2004-12/0170.html
http://secunia.com/advisories/13491
http://www.osvdb.org/21874
http://www.osvdb.org/21875
http://www.securityfocus.com/bid/11993

Check your stack JSON