CVE-2005-3264: Zeroblog

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter.

Affected products

• Zeroblog Zeroblog: version 1.1f only; version 1.2a only

Published 2005-10-20. Last modified 2026-06-16.