CVE-2006-0443: Cheesyblog

Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.

Affected products

• Cheesyblog Cheesyblog: version 1.0 only

Published 2006-01-26. Last modified 2026-06-16.