CVE-2005-2338: Xoops

Medium severity, CVSS 4.3. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.0.12 JP and earlier, XOOPS 2.0.13.1 and earlier, and 2.2.x up to 2.2.3 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) modules that use "XOOPS Code" and (2) newbb in the forum module.

Affected products

• Xoops Xoops: up to and including 2.0.12_jp; up to and including 2.0.13.1; up to and including 2.2.3_rc1

Published 2005-10-27. Last modified 2026-06-16.