CVE-2005-4644
edgewall software trac: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in trac 0.10, 0.9-stable.
Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- edgewall_software:trac
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-6vhp-hp77-6w52 | PyPI | trac | <0.9-stable | 0.9-stable |
| PYSEC-2005-1 | PyPI | trac | <0.10 | 0.10 |