CVE-2002-0292
Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.
Scoring
- CVSS base score
- 0.05
- EPSS probability
- 1.03%
- Published
- 2003-04-02
- Last modified
- 2026-03-16
Affected products
- n/a n/a