CVE-2006-0198
MEDIUM 4.3EPSS 1.7%
Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment.
- CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 1.68% chance of exploitation in the next 30 days, 77th percentile
- Published
- 2006-01-13
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://www.xoops.org/modules/newbb/viewtopic.php?topic_id=45637&forum=2&post_id=200481
- http://www.securityfocus.com/bid/16189