← Database

CVE-2005-1945

MEDIUM CVSS: 4.3 Published: 2005-06-09 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the convert_highlite_words function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data.

Affected Platforms

Invision Power Services Invision Community Blog

Weakness Type

NVD-CWE-Other

References