CVE-2004-0254: Crosscom Olicom Discuz

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag.

Affected products

• Crosscom Olicom Discuz: version 2.0 only; version 3.0 only

Published 2004-11-23. Last modified 2026-06-16.