Unrated severityNVD Advisory· Published Aug 29, 2007· Updated Jun 16, 2026

CVE-2007-4587

Description

Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to the setting of option.nopage.create in tuigwaa.properties.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

The Seasar Foundation/Escafeweb
cpe:2.3:a:the_seasar_foundation:escafeweb:*:*:*:*:*:*:*:*
Range: <=1.0.4
Easy Software/escafeWebllm-create
Range: 1.0 - 1.0.4
Easy Software/Tuigwaallm-create
Range: 1.0 - 1.0.4

Patches

Vulnerability mechanics

References

secunia.com/advisories/26577nvdPatchVendor Advisory
www.securityfocus.com/bid/25447nvdExploitPatch
jvn.jp/jp/JVN%2382276964/index.htmlnvd
osvdb.org/37147nvd
www.escafe.org/main/Securitynvd
exchange.xforce.ibmcloud.com/vulnerabilities/36264nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000