CVE-2006-0165

MEDIUM · CVSS 4.3 EPSS 1.18%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-01-11 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-0165

Severity

MEDIUM

CVSS

4.3

EPSS

1.18%

Java

Original NVD Description

Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form.