CVE-2007-6545

no score yetEPSS 4.1%

runcms runcms: no CVSS score yet. EPSS 4.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in RunCMS before 1.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) the subject parameter to modules/news/submit.php; (2) the PATH_INFO to modules/news/index.php, possibly related to the XoopsPageNav class; or (3) an avatar image to edituser.php.

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2007-12-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

runcms:runcms

References

http://osvdb.org/41241
http://osvdb.org/41242
http://osvdb.org/41243
http://securityreason.com/securityalert/3493
http://www.dsec.ru/about/articles/web_xss

Check your stack JSON