CVE-2009-1458: Razorcms

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in admin/index.php in razorCMS before 0.4 allow remote attackers to inject arbitrary web script or HTML via (1) the slab parameter in an edit action, (2) the catname parameter in a showcats action, and (3) the cat parameter in a reordercat action.

Affected products

• Razorcms Razorcms: up to and including 0.3; version 0.2 only

Published 2009-04-28. Last modified 2026-06-16.