CVE-2007-5304

no score yetEPSS 3.8%

yannick tanguy else if cms: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) repertimage parameter to utilisateurs/vousetesbannis.php, the (2) elseifvotetxtresultatduvote parameter to utilisateurs/votesresultats.php, and the (3) elseifforumtxtmenugeneraleduforum parameter to moduleajouter/depot/adminforum.php.

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-10-09
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

yannick_tanguy:else_if_cms

References

http://osvdb.org/38646
http://osvdb.org/38647
http://osvdb.org/38648
http://securityreason.com/securityalert/3204
http://www.securityfocus.com/archive/1/481683/100/0/threaded

Check your stack JSON