CVE-2006-3043: Cfxe-CMS

Low severity, CVSS 2.6. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in search.cfm in CreaFrameXe (CFXe) CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the voltext_suche parameter.

Affected products

• Cfxe-CMS Cfxe-CMS: up to and including 2.0

Published 2006-06-16. Last modified 2026-06-16.