CVE-2004-2138

MEDIUM · CVSS 6.8 EPSS 1.47%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2004-12-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2004-2138

Severity

MEDIUM

CVSS

6.8

EPSS

1.47%

Original Filing — NVD Description

Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the (1) Name, (2) Email, (3) Homepage or (4) Comments field.