CVE-2006-6509: Sitekiosk

Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the skinning feature in SiteKiosk before 6.5.150 allows local users to bypass security protections and inject arbitrary web script or HTML via an ABOUT: URI, which is displayed in the title bar of the browser.

Affected products

• Sitekiosk Sitekiosk: version 4.9.11 only; version 4.9.14 only; version 4.96 only; version 4.96.0 only; version 4.96.3 only; version 4.97.0 only; …

Published 2006-12-14. Last modified 2026-06-16.