CVE-2009-10003

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 0.7 is able to address this issue. The patch is identified as be23028633e8105de92f387036871c03f34d3124. It is recommended to upgrade the affected component. VDB-219714 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/capnsquarepants/wordcraft/commit/be23028633e8105de92f387036871c03f34d3124Patch, Third Party Advisory
• https://github.com/capnsquarepants/wordcraft/releases/tag/wordcraft-0.7Product, Third Party Advisory
• https://vuldb.com/?ctiid.219714Third Party Advisory
• https://vuldb.com/?id.219714Third Party Advisory
• https://github.com/capnsquarepants/wordcraft/commit/be23028633e8105de92f387036871c03f34d3124Patch, Third Party Advisory
• https://github.com/capnsquarepants/wordcraft/releases/tag/wordcraft-0.7Product, Third Party Advisory
• https://vuldb.com/?ctiid.219714Third Party Advisory
• https://vuldb.com/?id.219714Third Party Advisory

Published

Jan 29, 2023

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0997Unspecified vulnerability in the Database Vault component in…
• CVE-2009-0998Unspecified vulnerability in the PeopleSoft Enterprise HRMS …
• CVE-2009-0999Unspecified vulnerability in the Oracle Application Object L…
• CVE-2009-1000The Oracle Applications Framework component in Oracle E-Busi…
• CVE-2009-10001A vulnerability classified as problematic was found in jianl…6.1
• CVE-2009-10002A vulnerability, which was classified as problematic, has be…6.1
• CVE-2009-10004A vulnerability was found in Turante Sandbox Theme up to 1.5…6.1
• CVE-2009-10005ContentKeeper Web Appliance (now maintained by Impero Softwa…8.7
• CVE-2009-10006UFO: Alien Invasion versions up to and including 2.2.1 conta…9.3
• CVE-2009-10007Catalyst::Plugin::Authentication versions before 0.10_027 fo…9.1
• CVE-2009-1001Unspecified vulnerability in Oracle BEA WebLogic Portal 8.1 …
• CVE-2009-1002Unspecified vulnerability in Oracle BEA WebLogic Server 10.3…