How severe is CVE-2002-2129?

CVE-2002-2129 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2002-2129 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-2129?

CVE-2002-2129 affects W-agora. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2002-2129?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2002-2129 published?

CVE-2002-2129 was published on 2002-12-31 and last updated on 2026-06-16.

CVE-2002-2129

CVE-2002-2129 is a medium-severity vulnerability in W-agora with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 4% (88th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: W-agora
Published: 2002-12-31
Last modified: 2026-06-16

Description

Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.

Frequently asked questions

What is CVE-2002-2129?: Cross-site scripting vulnerability (XSS) in editform.php for w-Agora 4.1.5 allows remote attackers to execute arbitrary web script via an arbitrary form field name containing the script, which is echoed back to the user when displaying the form.
How severe is CVE-2002-2129?: CVE-2002-2129 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2002-2129 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-2129?: CVE-2002-2129 affects W-agora. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2002-2129?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-2129 published?: CVE-2002-2129 was published on 2002-12-31 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:w-agora:w-agora:4.1.5:*:*:*:*:*:*:*

More vulnerabilities in W-agora

CVE-2010-4867 — High (CVSS 7.5): Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers…
CVE-2008-1466 — High (CVSS 7.5): Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code…
CVE-2007-6647 — High (CVSS 7.5): SQL injection vulnerability in index.php in w-Agora 4.2.1 and earlier allows remote attackers to execute arbitrary SQL…
CVE-2007-1604 — High (CVSS 7.5): Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute…
CVE-2004-1562 — High (CVSS 7.5): SQL injection vulnerability in redir_url.php in w-Agora 4.1.6a allows remote attackers to execute arbitrary SQL…
CVE-2007-1605 — Medium (CVSS 5.0): w-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss.php with an invalid…

All CVEs affecting W-agora →