AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2005-2539

MEDIUM · CVSS 4.3 EPSS 2.53%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2005-08-10 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2005-2539
Severity
MEDIUM
CVSS
4.3
EPSS
2.53%

Original Filing — NVD Description

Multiple cross-site scripting (XSS) vulnerabilities in FlatNuke 2.5.5 and possibly earlier versions allow remote attackers to inject arbitrary web script or HTML via the (1) bodycolor, (2) backimage, (3) theme, or (4) logo parameter to structure.php, (5) admin, (6) admin_mail, or (7) back parameter to footer.php, or (8) the message body in a news post.