CVE-2002-0292: Open Source Development Network Slashcode

Low severity, CVSS 2.6. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.

Affected products

• Open Source Development Network Slashcode: up to and including 1.0.8; version 2.0 only; version 2.1 only; version 2.1.1 only; version 2.2 only; version 2.2.1 only; …

Published 2002-05-31. Last modified 2026-06-16.