VULNERABILITY INTELLIGENCE

CVE-2004-0248

CVSS score6.8 MEDIUM
EPSS probability1.49%
CISA KEVNot currently listed
Published2004-11-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.

Primary references