VULNERABILITY INTELLIGENCE
CVE-2002-0292
CVSS score2.6 LOW
EPSS probability1.34%
CISA KEVNot currently listed
Published2002-05-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N
Description
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.