Description
Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.
Remediation
References
Related Vulnerabilities
Envoy Proxy CVE-2024-45810 Vulnerability (CVE-2024-45810)
WordPress Plugin WordPress Photo Gallery by Gallery Bank Unspecified Vulnerability (3.1.26)
SharePoint CVE-2021-28450 Vulnerability (CVE-2021-28450)
XWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-32729)
Contao Improper Privilege Management Vulnerability (CVE-2025-57759)