CVE-2009-3303: Gforge

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter.

Affected products

• Gforge Gforge: version 4.5.14 only; version 4.7 only; version 4.8.1 only

Published 2009-11-24. Last modified 2026-06-16.