CVE-2006-2533: Greg Donald Destiney Rated Images Script

Medium severity, CVSS 5.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in (1) addWeblog.php and (2) leaveComments.php in Destiney Rated Images Script 0.5.0 does not properly filter all vulnerable HTML tags, which allows remote attackers to inject arbitrary web script or HTML via Javascript in a DIV tag.

Affected products

• Greg Donald Destiney Rated Images Script: version 0.5.0 only

Published 2006-05-22. Last modified 2026-06-16.