CVE-2006-1622: Phpselect

Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the description parameter to linklist.php and possibly other vectors involving (2) index.php and (3) linksubmit.php.

Affected products

• Phpselect Phpselect: any version

Published 2006-04-05. Last modified 2026-06-16.