CVE-2004-1862

no score yetEPSS 2.5%

Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
Published: 2004-03-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xmb_forum:xmb

References

http://marc.info/?l=bugtraq&m=108032355905265&w=2
http://osvdb.org/14983
http://osvdb.org/14985
http://osvdb.org/14986
http://osvdb.org/14987

Check your stack JSON