CVE-2007-4711: Www.toms-Seiten.at Toms Gaestebuch

Medium severity, CVSS 4.3. EPSS: 3.9% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage, (2) mail, and (3) name parameters in a show action to (a) form.php; the (4) language and (5) anzeigebreite parameters to (b) admin/header.php; and the (6) msg parameter to (c) install.php, different vectors than CVE-2006-0706.

Affected products

Published 2007-09-05. Last modified 2026-06-16.