Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307.
| Software | From | Fixed in |
|---|---|---|
| websitebaker2 / websitebaker | 2.6.7 | 2.6.7.x |
| websitebaker2 / websitebaker | - | 2.7.x |
| lepton-cms / lepton | - | - |