CVE-2005-4655

Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in…

published January 16, 2006

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in the news_body parameter, as demonstrated by elements such as "<me<meta>ta" and "<sc<script>ript>".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01255 · 69.1th percentile
Published
2006-01-16T21:00Z
EPSS history
Timeline
  • 16 JAN 21:00Z
    Cross-site scripting (XSS) vulnerability in submit.php in PHP-Fusion 6.0.204 allows remote attackers to inject arbitrary web script or HTML via nested tags in…
    cvelistv5