CVE-2006-3169: Comscripts Cs-Forum

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) msg_result and (2) rep_titre parameters in (a) read.php; and the (3) id and (4) parent parameters and (5) CSForum_nom, (6) CSForum_mail, and (7) CSForum_url cookie parameters in (b) ajouter.php.

Affected products

• Comscripts Cs-Forum: up to and including 0.81

Published 2006-06-23. Last modified 2026-06-16.