CVE-2003-0801
NoneCVSS
—
EPSS
12.2%
Published
Oct 6, 2003
CISA due date
—
The record
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-56858 Previously, pathological inputs could close an unescaped '/' early, allowing for… CWE-79
- CVE-2026-73650 SVGO, short for SVG Optimizer, is a Node.js library and command-line application for… CWE-79
- CVE-2026-73648 rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. CWE-79
- CVE-2026-73490 Loofah is a general library for manipulating and transforming HTML/XML documents and… CWE-79
- CVE-2026-71497 jsoup is a Java library for working with real-world HTML. CWE-79
- CVE-2026-69149 Angular is a development platform for building mobile and desktop web applications using… CWE-79
- CVE-2026-69151 Angular is a development platform for building mobile and desktop web applications using… CWE-79
- CVE-2026-48060 Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. CWE-79