Unrated severityNVD Advisory· Published Jul 8, 2009· Updated Apr 23, 2026
CVE-2009-2376
CVE-2009-2376
Description
Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module.
Affected products
14cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:a:tangocms:tangocms:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:tangocms:tangocms:2.2.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- dev.tangocms.org/issues/show/140nvdPatch
- tangocms.org/changelognvdPatchVendor Advisory
- dev.tangocms.org/repositories/diff/tangocmsnvdExploit
- secunia.com/advisories/35642nvdVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/51432nvd
News mentions
0No linked articles in our index yet.