CVE-2008-3739

no score yetEPSS 1.5%

Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving upload of files containing XSS sequences.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2008-08-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

spacetag:lacoodast
system_consultants:la_cooda_wiz

References

http://jvn.jp/en/jp/JVN27417220/index.html
http://jvn.jp/en/jp/JVN52557009/index.html
http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000048.html
http://secunia.com/advisories/31574
http://secunia.com/advisories/31582

Check your stack JSON