CVE-2006-2290: Www.goel.ch 2005-Comments-Script

Medium severity, CVSS 6.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) email, and (3) url parameter.

Affected products

• Www.goel.ch 2005-Comments-Script: any version

Published 2006-05-10. Last modified 2026-06-16.