CVE-2009-3719: Davethewebguy Battle Blog

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment.

Affected products

• Davethewebguy Battle Blog: version 1.25 only; version 1.30 only

Published 2009-10-16. Last modified 2026-06-16.