CVE-2002-1681

Published: Dec 31, 2002Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.

Affected (5)

Products: Open Source Development Network: Slashcode

Open Source Development Network

1 product

Slashcode

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Open Source Development Network Slashcode	Version 2.2.1
Open Source Development Network Slashcode	Version 2.2.2
Open Source Development Network Slashcode	Version 2.2.3
Open Source Development Network Slashcode	Version 2.2.4
Open Source Development Network Slashcode	Version 2.2.5