CVE-2004-2752

no score yetEPSS 1.0%

Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2004-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

postnuke_software_foundation:postnuke

References

http://securitytracker.com/id?1008629
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html
http://www.gulftech.org/01032004.php
http://securitytracker.com/id?1008629
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html

Check your stack JSON