CVE-2009-2814

Cross-site scripting (XSS) vulnerability in the Wiki Server in Apple Mac OS X 10.5.8 allows remote attackers to inject arbitrary web script or HTML via a search request containing data that does not use UTF-8 encoding.

Affected products

Macos X

Apple Mac Os X Server

= 10.5.8

CVSS 2.0

4.3 MEDIUM

EPSS

1.9% (77th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2009-09-14