Description
Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.
Remediation
References
Related Vulnerabilities
PHP Improper Input Validation Vulnerability (CVE-2007-4784)
WordPress Plugin ABASE Multiple Vulnerabilities (2.6)
WordPress Plugin Browser Screenshots Cross-Site Scripting (1.7.5)
WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.2.0)
Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46835)