Back

CVE-2005-1285

Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the hilight parameter.

Published: Apr 22, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
woltlab burning_board *

GitHub Security Advisory GHSA-8j8v-v524-wqw4

Cross-site scripting (XSS) vulnerability in thread.php in WoltLab Burning Board 2.3.1 and earlier...

Risk Scores

CVSS Score 6.8 / 10
EPSS Score 2.00%

Top 21% most likely to be exploited

Threat Score 27.8 / 100

Data Sources

NVD EPSS GitHub