CVE-2012-1782: Multiple cross-site scripting (XSS) vulnerabilities in questions/ask in OSQA 3b allow remote attackers to i...

Security readout for executives and security teams

CVE-2012-1782 is an XSS issue in OSQA 3b. A remote user could inject script or HTML through the question asking interface, specifically fields described as the URL bar and picture bar. This could affect visitors or administrators who view stored malicious content. Exposure is likely limited to organizations still running OSQA 3b, especially internet-facing Q&A or support sites with the questions/ask feature enabled. The bundle does not identify other affected products or versions. Prioritize if OSQA remains internet-facing or used by authenticated staff. The business risk is account compromise or user trust damage through malicious script execution, but urgency is lower without evidence of active exploitation in the provided sources. Mitigation focus: Identify any active OSQA 3b deployments.; Check OSQA maintainer or distribution guidance for fixed versions or advisories.; Restrict access to affected question submission features until remediated..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.