CVE-2005-2488: Web Content Management News System

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Web Content Management News System allows remote attackers to inject arbitrary web script or HTML via (1) the strRootpath parameter to validsession.php or (2) the strTable parameter to Admin/News/List.php.

Affected products

• Web Content Management Web Content Management News System: any version

Published 2005-08-07. Last modified 2026-06-16.