CVE-2008-3328
edgewall software trac: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in trac 0.10.5.
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- edgewall_software:trac
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-x6jf-c7wh-7m7w | PyPI | trac | <0.10.5 | 0.10.5 |
| PYSEC-2008-5 | PyPI | trac | <0.10.5 | 0.10.5 |