CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. Its EPSS score suggests a 10.5% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2008-1502
Severity
MEDIUM
CVSS
4.3
EPSS
10.50%
Original NVD Description
The _bad_protocol_once function in phpgwapi/inc/class.kses.inc.php in KSES, as used in eGroupWare before 1.4.003, Moodle before 1.8.5, and other products, allows remote attackers to bypass HTML filtering and conduct cross-site scripting (XSS) attacks via a string containing crafted URL protocols.