CVE-2006-0198: Xoops Pool Module

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers to inject arbitrary web script or HTML via JavaScript in the SRC attribute of an IMG element in a comment.

Affected products

• Xoops Xoops Pool Module: any version

Published 2006-01-13. Last modified 2026-06-16.