{"id":"CVE-2003-1534","aliases":["EUVD-2003-1524","GHSA-596r-x9qj-4m68"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote...","description":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01107,"percentile":0.6604,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:36Z","products":[{"vendor":"justice_media","product":"guestbook"}],"references":[{"url":"http://www.securityfocus.com/bid/7233","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/8475","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/316745/30/25280/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securitytracker.com/id?1006412","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://securityreason.com/securityalert/3347","tags":["third-party-advisory","x_refsource_SREASON","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1534"},{"url":"https://github.com/advisories/GHSA-596r-x9qj-4m68"}],"sources":{"cve":[{"id":"CVE-2003-1534","description":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.","status":"published","published":"2007-11-08T20:00:00Z","modified":"2024-08-08T02:35:16.393Z","updated_at":"2026-11-02T14:20:16.072351Z"}],"euvd":[{"id":"EUVD-2003-1524","description":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.","status":"published","published":"2007-11-08T20:00:00Z","modified":"2024-08-08T02:35:16Z","updated_at":"2026-11-03T01:15:02.977959Z"}],"ghsa":[{"id":"GHSA-596r-x9qj-4m68","title":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote...","description":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.","status":"published","published":"2022-04-29T01:28:13Z","modified":"2023-01-30T05:02:21Z","cwes":["CWE-79"],"updated_at":"2026-11-02T14:46:37.149934Z"}],"nvd":[{"id":"CVE-2003-1534","description":"Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.","status":"published","published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:36.637Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}