CVE-2006-1698

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-11 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that they are the result of post-disclosure analysis.

Affected products

Matt Wright Guestbook: through 2.3.1

References

http://secunia.com/advisories/19586
http://www.vupen.com/english/advisories/2006/1287
https://exchange.xforce.ibmcloud.com/vulnerabilities/25697
http://secunia.com/advisories/19586
http://www.vupen.com/english/advisories/2006/1287
https://exchange.xforce.ibmcloud.com/vulnerabilities/25697

Get alerted when CVE-2006-1698 or the next vulnerability affects your stack