CVE-2005-2894: Pblang

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field.

Affected products

• Pblang Pblang: version 4.65 only

Published 2005-09-14. Last modified 2026-06-16.