CVE-2006-0198

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-01-13 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment.

Affected products

Xoops Pool Module: all versions

References

http://www.securityfocus.com/archive/1/421325/100/0/threaded
http://www.securityfocus.com/bid/16189
http://www.xoops.org/modules/newbb/viewtopic.php?topic_id=45637&forum=2&post_id=200481
https://exchange.xforce.ibmcloud.com/vulnerabilities/24091
http://www.securityfocus.com/archive/1/421325/100/0/threaded
http://www.securityfocus.com/bid/16189
http://www.xoops.org/modules/newbb/viewtopic.php?topic_id=45637&forum=2&post_id=200481
https://exchange.xforce.ibmcloud.com/vulnerabilities/24091

Get alerted when CVE-2006-0198 or the next vulnerability affects your stack