VULNERABILITY INTELLIGENCE

CVE-2007-3198

CVSS score4.3 MEDIUM
EPSS probability2.49%
CISA KEVNot currently listed
Published2007-06-12
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Primary references