CVE-2005-4574: Paperthin Commonspot Content Server

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter.

Affected products

• Paperthin Commonspot Content Server: up to and including 4.5; version 2.5 only; version 3.0 only; version 3.2 only; version 4.0 only

Published 2005-12-29. Last modified 2026-06-16.