Unrated severityNVD Advisory· Published Jul 11, 2007· Updated Apr 23, 2026

CVE-2007-3708

Description

Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML via (1) String.fromCharCode and (2) malformed nested tag manipulations in an unspecified component, related to insufficient sanitization by the xss_clean function.

Affected products

Codeigniter/Codeigniter
cpe:2.3:a:codeigniter:codeigniter:1.5.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

lists.grok.org.uk/pipermail/full-disclosure/2007-July/064500.htmlnvd
osvdb.org/37907nvd
secunia.com/advisories/25991nvd
securityreason.com/securityalert/2877nvd
www.securityfocus.com/archive/1/473190/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/35350nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000