VULNERABILITY INTELLIGENCE
CVE-2008-7231
CVSS score3.5 LOW
EPSS probability0.84%
CISA KEVNot currently listed
Published2009-09-14
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title).
Weakness classification
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')