CVE-2005-3991: Phpheaven Phpmychat

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to (1) start_page.css.php and (2) style.css.php; or the From parameter to users_popupL.php.

Affected products

• Phpheaven Phpmychat: version 0.14.6 only

Published 2005-12-04. Last modified 2026-06-16.