CVE-2002-0281: Codeworx Technologies Dcp-Portal

Medium severity, CVSS 5.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in DCP-Portal 4.2 and earlier allows remote attackers to gain privileges of other portal users by providing Javascript in the job information field to user_update.php.

Affected products

• Codeworx Technologies Dcp-Portal: version 3.7 only; version 4.0 only; version 4.1 only; version 4.2 only

Published 2002-05-31. Last modified 2026-06-16.