← Database

CVE-2004-2756

MEDIUM CVSS: 4.3 Published: 2004-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters.

Affected Platforms

Xoops Xoops

Weakness Type

CWE-79

References