CVE-2006-2741: Epic Designs Tinybb

Medium severity, CVSS 6.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors.

Affected products

• Epic Designs Tinybb: up to and including 0.3

Published 2006-06-01. Last modified 2026-06-16.