5.8 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.5%
Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter.
secunia.com/advisories/23526
www.securityfocus.com/bid/21637
www.securityfocus.com/data/vulnerabilities/exploits/21637.html