Unrated severityNVD Advisory· Published Jul 11, 2007· Updated Jun 16, 2026
CVE-2007-3685
CVE-2007-3685
Description
Cross-site scripting (XSS) vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Affected products
2- cpe:2.3:a:masuga_design:unobtrusive_ajax_star_rating_bar:*:*:*:*:*:*:*:*Range: <=1.1.9
- Range: <1.2.0
Patches
Vulnerability mechanics
References
5- secunia.com/advisories/25985nvdPatchVendor Advisory
- www.cirt.net/advisories/unobtrusive_ajax_star_rating.shtmlnvdVendor Advisory
- www.osvdb.org/35935nvd
- www.securityfocus.com/bid/24840nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/35326nvd
News mentions
0No linked articles in our index yet.