CVE-2006-5106: Facileforms

Medium severity, CVSS 5.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either register_globals or RG_EMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Facileforms Facileforms: version 1.2 only; version 1.2.1 only; version 1.2.2 only; version 1.2.3 only; version 1.2.4 only; version 1.2.5 only; …

Published 2006-10-03. Last modified 2026-06-16.