CVE-2003-1238: Nuked-Klan

Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules.

Affected products

• Nuked-Klan Nuked-Klan: version 1.2 only; version 1.2_beta only; version 1.3 only; version 1.3_beta only

Published 2003-12-31. Last modified 2026-06-16.