Back
CVE-2005-4477
Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the bab[searchfor] parameter.
Published: Dec 22, 2005
Modified: Jun 16, 2026
CVSS Metrics
GitHub Security Advisory GHSA-fhj6-mqf7-5g3c
Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers...
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
1.98%
Top 21% most likely to be exploited
Threat Score
27.8 / 100
Data Sources
NVD
EPSS
GitHub