CVE-2005-4489: Scoop

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) type and (2) count parameters, and (3) the query string in a story.

Affected products

• Scoop Scoop: up to and including 1.1_rc1

Published 2005-12-22. Last modified 2026-06-16.