CVE-2012-3999: Sayakbanerjee Sticky Notes

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in admin/login.php in Sticky Notes 0.3.09062012.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.

Affected products

• Sayakbanerjee Sticky Notes: up to and including 0.3.09062012.4

Published 2012-07-12. Last modified 2026-06-16.