CVE-2007-3299

no score yetEPSS 1.6%

Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows remote attackers to inject arbitrary web script or HTML via a search string.

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
Published: 2007-06-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

awffull:awffull

References

http://osvdb.org/37478
http://secunia.com/advisories/25776
http://www.securityfocus.com/bid/24587
http://www.stedee.id.au/awffull/changes
http://www.stedee.id.au/flyspray/task/10

Check your stack JSON