CVE-2006-1752: Michiel Van Baak Mvblog

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) body fields in a comment.

Affected products

• Michiel Van Baak Mvblog: version 1.0 only; version 1.1 only; version 1.2 only; version 1.3 only; version 1.5 only

Published 2006-04-12. Last modified 2026-06-16.