Unrated severityNVD Advisory· Published Oct 5, 2007· Updated Apr 23, 2026
CVE-2007-5227
CVE-2007-5227
Description
Multiple cross-site scripting (XSS) vulnerabilities in messaging/course/composeMessage.jsp in BlackBoard Learning System 6.3.1.593 and earlier in BlackBoard Academic Suite allow remote attackers to inject arbitrary web script or HTML via the (1) subject_t and (2) body_text parameters. NOTE: vector 2 requires bypassing a client-side security mechanism that attempts to block XSS sequences.
Affected products
1- cpe:2.3:a:blackboard:blackboard_learning_and_community_post_systems:6.3.1.593:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.