CVE-2015-2796: Projectpier

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Project-Pier ProjectPier-Core allow remote attackers to inject arbitrary web script or HTML via the search_for parameter to (1) search_by_tag.php, (2) search_contacts.php, or (3) search.php.

Affected products

• Projectpier Projectpier: version 0.8.8 only

Published 2018-02-02. Last modified 2026-06-17.