CVE-2006-0877: Easy Forum

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable.

Affected products

• Easy Forum Easy Forum: version 2.5 only

Published 2006-02-24. Last modified 2026-06-16.