← Database

CVE-2005-4672

MEDIUM CVSS: 4.3 Published: 2005-12-31 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the (1) m1, (2) m2, (3) m3, (4) imgsrc, and (5) m4 parameter.

Affected Platforms

Citypost Simple Image Editor

Weakness Type

NVD-CWE-Other

References