CVE-2002-1494: Aestiva Html OS

Medium severity, CVSS 4.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.

Affected products

• Aestiva Html OS: version 2.4 only

Published 2003-04-02. Last modified 2026-06-16.