VULNERABILITY INTELLIGENCE

CVE-2013-4158

CVSS score6.1 MEDIUM

EPSS probability1.29%

CISA KEVNot currently listed

Published2019-12-11

Last modified2026-06-16

Description

Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter.