CVE-2009-0934
EPSS 0.75%ejabberd - cross-site scripting
Published: 3/18/2009Modified: 4/28/2026
Description
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
Affected packages (2)
- Debian/ejabberdfrom 0, < 2.0.5-1
- Debian/ejabberdfrom 0, < 2.0.1-6+lenny1