CVE-2007-6461

no score yetEPSS 1.1%

flyspray flyspray: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via (1) the query string in an index action, related to the savesearch JavaScript function; and (2) the details parameter in a details action, related to the History tab and the getHistory JavaScript function.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-12-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

flyspray:flyspray

References

http://flyspray.org/fsa:2
http://osvdb.org/39256
http://osvdb.org/39257
http://secunia.com/advisories/28106
http://flyspray.org/fsa:2

Check your stack JSON