CVE-2006-5799: Xenis Xenis.creator CMS

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters.

Affected products

• Xenis Xenis.creator CMS: any version

Published 2006-11-08. Last modified 2026-06-16.