CVE-2004-1818

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.

Published 2004-03-15. Last modified 2026-06-16.