CVE-2005-0485: Phparena Panews

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter.

Affected products

• Phparena Panews: version 2.0b4 only

Published 2005-03-30. Last modified 2026-06-16.