CVE-2002-1037: Michael Dean Double Choco Latte

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to inject arbitrary HTML, including script, into web pages via the (1) Ticket# Find, (2) Priorities, (3) Severities, (4) Projects, (5) WO# Find, (6) Departments and (7) Users features.

Affected products

• Michael Dean Double Choco Latte: version 2002-01-20 only; version 2002-02-15 only

Published 2002-10-04. Last modified 2026-06-16.