CVE-2006-0233: Microblog

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag.

Affected products

• Microblog Microblog: version 2.0_rc10 only

Published 2006-01-18. Last modified 2026-06-16.