CVE-2006-0735

Cross-site scripting (XSS) vulnerability in BBcode.pm in M

published February 16, 2006

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products such as My Blog before 1.65, allows remote attackers to inject arbitrary Javascript via a javascript URI in an (1) img or (2) url BBcode tag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02894 · 86.7th percentile
Published
2006-02-16T11:00Z
EPSS history
Timeline
  • 16 FEB 11:00Z
    Cross-site scripting (XSS) vulnerability in BBcode.pm in M
    cvelistv5