CVE-2005-2465: Pc-Experience

Medium severity, CVSS 5.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable.

Affected products

• Pc-Experience Pc-Experience: version 1.15 only; version 2.0 only
• Toppe Toppe CMS: any version

Published 2005-12-31. Last modified 2026-06-16.