CVE-2009-4497: Malcom Box Lxr Cross Referencer

Medium severity, CVSS 4.3. EPSS: 3.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in LXR Cross Referencer 0.9.5 and 0.9.6 allows remote attackers to inject arbitrary web script or HTML via the i parameter to the ident program.

Affected products

• Malcom Box Lxr Cross Referencer: version 0.9.5 only; version 0.9.6 only

Published 2010-01-07. Last modified 2026-06-16.