← CVECheck
HomeVulnerabilities

CVE-2002-1494 — MEDIUM severity vulnerability (Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/O)

Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.

CVE IDCVE-2002-1494
SeverityMEDIUM
CVSS score4.3
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
CWENVD-CWE-Other
StatusModified
Published2003-04-02
Last modified2026-04-16
DescriptionCross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.
SourceNIST National Vulnerability Database

🔍 Search all vulnerabilities →