Security Advisory

CVE-2006-0198

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-01-13 23:00:00

Last updated 2024-08-07 16:25:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment.

← Browse all CVEs View on cve.org ↗