CVE-2012-4052

Published: Aug 20, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Jease before 2.9, when creating a comment, allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, or (3) comment parameter.

Affected (29)

Products: Jease: Jease

Jease

1 product

Jease

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Jease Jease	Up to 2.8
Jease Jease	Version 0.1
Jease Jease	Version 0.2
Jease Jease	Version 0.3
Jease Jease	Version 0.4
Jease Jease	Version 0.5
Jease Jease	Version 0.6
Jease Jease	Version 0.7
Jease Jease	Version 0.8
Jease Jease	Version 0.9
Jease Jease	Version 1.0
Jease Jease	Version 1.1
Jease Jease	Version 1.2
Jease Jease	Version 1.3
Jease Jease	Version 1.4
Jease Jease	Version 1.5
Jease Jease	Version 1.6
Jease Jease	Version 1.7
Jease Jease	Version 1.8
Jease Jease	Version 1.9
Jease Jease	Version 2.0
Jease Jease	Version 2.1
Jease Jease	Version 2.2
Jease Jease	Version 2.3
Jease Jease	Version 2.4
Jease Jease	Version 2.5
Jease Jease	Version 2.6
Jease Jease	Version 2.7
Jease Jease	Version 2.9