CVE-2008-2072: Virtual Design Studios Vlbook

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows remote attackers to inject arbitrary web script or HTML via the l parameter, a different vector than CVE-2006-3260.

Affected products

• Virtual Design Studios Vlbook: version 1.21 only

Published 2008-05-05. Last modified 2026-06-16.