CVE-2006-0661: Scriptme Sme Blog Host

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag.

Affected products

• Scriptme Sme Blog Host: any version
• Scriptme Sme Gb Host: version 1.21 only

Published 2006-02-13. Last modified 2026-06-16.