CVE-2011-1660

no score yetEPSS 1.3%

Multiple cross-site scripting (XSS) vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via (1) the reportName or (2) uniqueId parameter to CoreViewerInit.js, or the (3) uniqueId or (4) traceLevel parameter to CoreController.js, as reachable by CoreHandler.ashx.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2011-04-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

grapecity:data_dynamics_reports

References

http://secunia.com/advisories/43953
http://securityreason.com/securityalert/8190
http://www.gcpowertools.com/DownloadLatestVersion
http://www.osvdb.org/71488
http://www.securityfocus.com/archive/1/517244/100/0/threaded

Check your stack JSON