Unrated severityNVD Advisory· Published Jul 8, 2009· Updated Jun 16, 2026
CVE-2009-2376
CVE-2009-2376
Description
Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module.
Affected products
15cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.3:*:*:*:*:*:*:*
- (no CPE)range: <2.3.0
Patches
Vulnerability mechanics
References
5- dev.tangocms.org/issues/show/140nvdPatch
- tangocms.org/changelognvdPatchVendor Advisory
- dev.tangocms.org/repositories/diff/tangocmsnvdExploit
- secunia.com/advisories/35642nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/51432nvd
News mentions
0No linked articles in our index yet.