VulnerabilityModified
CVE-2006-6844
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.
MEDIUM 6.8EPSS 1.36%
Does this matter?
Lower severity and a low EPSS score (1.36%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.36% probability · 70th percentile
- CISA KEV
- Not listed
- Affected
- cmsmadesimple/cms made simple
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/2087
- http://securitytracker.com/id?1017445Exploit
- http://www.l0j1k.com/security/CMSMadeSimple_1.0.2_25Dec06.txtExploit
- http://www.securityfocus.com/archive/1/455306/100/0/threaded
- http://www.securityfocus.com/bid/21756
- http://securityreason.com/securityalert/2087
- http://securitytracker.com/id?1017445Exploit
- http://www.l0j1k.com/security/CMSMadeSimple_1.0.2_25Dec06.txtExploit
- http://www.securityfocus.com/archive/1/455306/100/0/threaded
- http://www.securityfocus.com/bid/21756
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.