CVE-2006-5598: Webgeneius Goop Gallery

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter.

Affected products

• Webgeneius Goop Gallery: version 2.0 only; version 2.0.1 only; version 2.0.2 only

Published 2006-10-28. Last modified 2026-06-16.