CVE-2005-4476: Openedit Inc Openedit

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) oe-action and (2) page parameters.

Affected products

• Openedit Inc Openedit: up to and including 4.0

Published 2005-12-22. Last modified 2026-06-16.