CVE-2009-2937: Intertwingly Planet

Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.

Affected products

• Intertwingly Planet: version 2.0 only
• Intertwingly Planet Venus: any version

Published 2009-09-18. Last modified 2026-06-16.