Vulnerability in Soren Boysen Skull-Splitter Guestbook

CVE-2005-1620

Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message.

EPSS: 0.027 (84.4th percentile) — read the EPSS interpretation.

Affected products

Soren_boysen Skull-splitter_guestbook — versions 1.0, 2.0, 2.2
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_MISC)