CVE-2005-4072: Cfmagic Magic Forum Personal

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, as used in the "Search For:" field.

Affected products

• Cfmagic Magic Forum Personal: up to and including 2.5

Published 2005-12-08. Last modified 2026-06-16.