CVE-2008-5720
Mayaa Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
- Record
CVE-2008-5720- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
- Record
CVE-2008-5720- Updated
- 2026-11-02
EUVDEUVD-2022-4479No score
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
- Record
EUVD-2022-4479- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m3p9-c7p3-xxmpNo score
Mayaa Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
- Record
GHSA-m3p9-c7p3-xxmp- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVGHSA-m3p9-c7p3-xxmpNo score
Mayaa Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.
- Record
GHSA-m3p9-c7p3-xxmp- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
com.github.seasarorg.mayaa:mayaaMaven | before 1.1.23 | 1.1.23 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5720 is a medium vulnerability (CVSS 4.3) in Seasar Mayaa, published December 26, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 70th percentile. Fixed in com.github.seasarorg.mayaa:mayaa 1.1.23.
References
exchange.xforce.ibmcloud.com/vulnerabilities/47623
secunia.com/advisories/33333
securityfocus.com/bid/33015
osvdb.org/51007
jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000085.html
mayaa.seasar.org/news/vulnerability20081225.html