CVE-2006-0860: Michael Salzer Guestbox

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a "http://" string, which bypasses a regular expression check, and (2) other unspecified attack vectors.

Affected products

• Michael Salzer Guestbox: version 0.6 only

Published 2006-02-23. Last modified 2026-06-16.