CVE-2006-7043: Chipmunk Scripts Chipmunk Blogger

Low severity, CVSS 3.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in (1) posts and (2) profile names; and (3) a javascript URI in a URL argument in the photo gallery.

Affected products

• Chipmunk Scripts Chipmunk Blogger: any version

Published 2007-02-24. Last modified 2026-06-16.