CVE-2006-0156: Foxrum

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php.

Affected products

• Foxrum Foxrum: version 4.0.4f only

Published 2006-01-10. Last modified 2026-06-16.