CVE-2002-1458

HIGH 7.5CVE-2002-1458 · Published 09/06/2003 · updated 16/06/2026

In short

CVE-2002-1458 is a HIGH (CVSS 7.5) vulnerability affecting l-forum (leszek krupinski).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
l-forum leszek_krupinski	`= 2.4.0`	No fix yet

Description

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.

References

archives.neohapsis.com/archives/bugtraq/2002-08/0115.html · Patch
sourceforge.net/tracker/download.php · Patch
iss.net/security_center/static/9838.php · Patch
securityfocus.com/bid/5462 · Patch

More vulnerabilities in l-forum

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free