VULNERABILITY INTELLIGENCE

CVE-2007-0973

CVSS score6.8 MEDIUM
EPSS probability1.59%
CISA KEVNot currently listed
Published2007-02-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header and certain other HTTP headers, which are displayed without proper sanitization when an administrator performs a Logged Guest action.

Primary references