CVE-2001-1199: Steve Kneizys Agora.cgi

High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in agora.cgi for Agora 3.0a through 4.0g, when debug mode is enabled, allows remote attackers to execute Javascript on other clients via the cart_id parameter.

Affected products

• Steve Kneizys Agora.cgi: version 3.2 only; version 3.2a only; version 3.2b only; version 3.2c only; version 3.2d only; version 3.2e only; …

Published 2001-12-17. Last modified 2026-06-16.