CVE-2003-0590: Splatt Forum

High severity, CVSS 7.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Splatt Forum allows remote attackers to insert arbitrary HTML and web script via the post icon (image_subject) field.

Affected products

• Splatt Splatt Forum: any version

Published 2003-08-18. Last modified 2026-06-16.