CVE-2006-6421

None

CVSS

—

EPSS

15.6%

Published

Dec 10, 2006

CISA due date

—

The record

Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user.

Affected packages

Ecosystem	Package	Introduced	Fixed