CVE-2002-0292: Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote...

Security readout for executives and security teams

CVE-2002-0292 is a legacy cross-site scripting issue in Slash before 2.2.5. If an organization still operates Slashcode-based sites, an attacker could trick users into loading malicious JavaScript that may expose cookies or authentication information. Exposure is most likely in old public or internal Slash/Slashcode deployments running versions before 2.2.5, including sites using derived or embedded Slash code. Modern systems are only in scope if they retain this vulnerable code path. Treat this as a targeted legacy exposure issue. It is unlikely to affect current mainstream platforms, but an internet-facing obsolete Slashcode site could create account compromise risk and should be upgraded, isolated, or retired. Mitigation focus: Upgrade Slash or Slashcode deployments to version 2.2.5 or later.; Identify any forked or embedded Slash code and compare it with the fixed release.; Check vendor or project advisories before relying on compensating controls..

Prepared

Jun 30, 2026, 14:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.