CVE-2004-0663: Powerportal

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the (1) id parameter to the (a) private_messages module; (2) search parameter to the (b) links and (c) content modules; and (3) files parameter to the gallery module.

Affected products

• Powerportal Powerportal: version 1.1b only; version 1.3 only; version 1.3b only

Published 2004-08-06. Last modified 2026-06-16.