CVE-2005-3085: Riverdark Studios Rss Syndicator Module

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in rss.php in Riverdark Studios RSS Syndicator module 2.1.7 allow remote attackers to inject arbitrary web script or HTML via the (1) forum or (2) topic parameters.

Affected products

Published 2005-09-27. Last modified 2026-06-16.