CVE-2008-5720

no score yetEPSS 1.3%

Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2008-12-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

seasar:mayaa

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-m3p9-c7p3-xxmp	Maven	com.github.seasarorg.mayaa:mayaa	<1.1.23	1.1.23

References

http://jvn.jp/en/jp/JVN17298485/index.html
http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html
http://mayaa.seasar.org/news/vulnerability20081225.html
http://osvdb.org/51007
http://secunia.com/advisories/33333

Check your stack JSON