CVE-2005-1008: Asp-Dev Xm Forum

Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in posts.asp for ASP-DEv XM Forum RC3 allows remote attackers to inject arbitrary web script or HTML via a "javascript:" URL in an IMG tag.

Affected products

Published 2005-05-02. Last modified 2026-06-16.