CVE-2006-6920

CVE-2006-6920 describes a cross-site scripting (XSS) vulnerability in Nucleus CMS prior to version 3.24. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving lib/ADMIN.php and lib/SKIN.php. JVN details indicate that an arbitrary script c...