CVE-2005-1356: Includer.cgi

Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.

Affected products

• Includer.cgi Includer.cgi: any version

Published 2005-05-02. Last modified 2026-06-16.