CVE-2006-1622

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-05 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the description parameter to linklist.php and possibly other vectors involving (2) index.php and (3) linksubmit.php.

Affected products

Phpselect: all versions

References

http://www.securityfocus.com/archive/1/429608/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/25607
http://www.securityfocus.com/archive/1/429608/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/25607

Get alerted when CVE-2006-1622 or the next vulnerability affects your stack