CVE-2007-1646: Subhub

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the searchtext parameter to (a) /search, or the (2) message parameter to (b) /calendar or (c) /subscribe.

Affected products

• Subhub Subhub: version 2.3.0 only

Published 2007-03-24. Last modified 2026-06-16.