CVE-2007-0384: Postnuke Software Foundation Postnuke

Medium severity, CVSS 5.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Postnuke Software Foundation Postnuke: version 0.764 only

Published 2007-01-19. Last modified 2026-06-16.