CVE-2002-1685: Working Resources Inc. Badblue

Medium severity, CVSS 4.3. EPSS: 7.3% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.

Affected products

• Working Resources Inc. Badblue: version enterprise_1.7.2 only; version personal_1.7 only; version personal_1.7.2 only

Published 2002-12-31. Last modified 2026-06-16.