Vulnerability Database

299,879

Total vulnerabilities in the database

CVE-2002-2260

Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page.

  • Published: Dec 31, 2002
  • Updated: Nov 9, 2025
  • CVE: CVE-2002-2260
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
mozilla / bugzilla 2.16.8 2.16.8.x
mozilla / bugzilla 2.17.6 2.17.6.x
mozilla / bugzilla 2.16.1 2.16.1.x
mozilla / bugzilla 2.16.2 2.16.2.x
mozilla / bugzilla 2.16.11 2.16.11.x
mozilla / bugzilla 2.17.4 2.17.4.x
mozilla / bugzilla 2.16-rc1 2.16-rc1.x
mozilla / bugzilla 2.10 2.10.x
mozilla / bugzilla 2.17.1 2.17.1.x
mozilla / bugzilla 2.16 2.16.x
mozilla / bugzilla 2.16.9 2.16.9.x
mozilla / bugzilla 2.14.2 2.14.2.x
mozilla / bugzilla 2.14.3 2.14.3.x
mozilla / bugzilla 2.14.4 2.14.4.x
mozilla / bugzilla 2.16.7 2.16.7.x
mozilla / bugzilla 2.17.5 2.17.5.x
mozilla / bugzilla 2.17.3 2.17.3.x
mozilla / bugzilla 2.16.4 2.16.4.x
mozilla / bugzilla 2.12 2.12.x
mozilla / bugzilla 2.16.3 2.16.3.x
mozilla / bugzilla 2.14.5 2.14.5.x
mozilla / bugzilla 2.17.7 2.17.7.x
mozilla / bugzilla 2.17 2.17.x
mozilla / bugzilla 2.16.6 2.16.6.x
mozilla / bugzilla 2.14.1 2.14.1.x
mozilla / bugzilla 2.16.5 2.16.5.x
mozilla / bugzilla 2.14 2.14.x
mozilla / bugzilla 2.16.10 2.16.10.x