CVE-2006-5985

no score yetEPSS 1.1%

Multiple cross-site scripting (XSS) vulnerabilities in admin/options.php in Extreme CMS 0.9, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) bg1, (2) bg2, (3) text, or (4) size parameters. NOTE: the provenance of this information is unknown; details are obtained from third party sources.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
Published: 2006-11-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

extreme_cms:extreme_cms

References

http://secunia.com/advisories/22919
http://www.vupen.com/english/advisories/2006/4529
http://secunia.com/advisories/22919
http://www.vupen.com/english/advisories/2006/4529

Check your stack JSON