CVE-2006-1970: Kcscripts Portal Pack

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.

Affected products

• Kcscripts Portal Pack: up to and including 6.0

Published 2006-04-21. Last modified 2026-06-16.