CVE-2002-0326: Working Resources Inc. Badblue

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains Javascript.

Affected products

• Working Resources Inc. Badblue: version 1.2.7 only; version 1.2.8 only; version 1.5 only; version 1.5.6_beta only; version 1.6.1_beta only

Published 2002-06-25. Last modified 2026-06-16.