CVE-2006-0239: 8pixel.net Simple Blog

Medium severity, CVSS 5.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.

Affected products

Published 2006-01-18. Last modified 2026-06-16.