CVE-2009-4786

Published: Apr 21, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Pligg before 1.0.3 allow remote attackers to inject arbitrary web script or HTML via the HTTP Referer header to (1) admin/admin_config.php, (2) admin/admin_modules.php, (3) delete.php, (4) editlink.php, (5) submit.php, (6) submit_groups.php, (7) user_add_remove_links.php, and (8) user_settings.php.

Affected (14)

Products: Pligg: Pligg Cms

Pligg

1 product

Pligg Cms

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Pligg Pligg Cms	Up to 1.0.2
Pligg Pligg Cms	Version 1.0.0
Pligg Pligg Cms	Version 1.0.0 rc1
Pligg Pligg Cms	Version 1.0.0 rc2
Pligg Pligg Cms	Version 1.0.0 rc3
Pligg Pligg Cms	Version 1.0.0 rc4
Pligg Pligg Cms	Version 1.0.0 rc5
Pligg Pligg Cms	Version 1.0.1
Pligg Pligg Cms	Version 9.5
Pligg Pligg Cms	Version 9.9.0
Pligg Pligg Cms	Version 9.9.0 beta
Pligg Pligg Cms	Version 9.9.5
Pligg Pligg Cms	Version 9.9.5 beta
Pligg Pligg Cms	Version 9.9