CVE-2008-5056: Activecampaign Triolive

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1.58.7 allows remote attackers to inject arbitrary web script or HTML via the department_id parameter to index.php.

Affected products

• Activecampaign Triolive: up to and including 1.58.6; version 1.0 only; version 1.03 only; version 1.04 only; version 1.05 only; version 1.06 only; …

Published 2008-11-13. Last modified 2026-06-16.