1 results (0.004 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2

27 Jan 2006 — Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer). • https://www.exploit-db.com/exploits/27127 •