Unrated severityNVD Advisory· Published Aug 3, 2005· Updated Jun 16, 2026

CVE-2005-2438

Description

Cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier allows remote attackers to inject arbitrary Javascript via the BBCode color value.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Usebb/Usebbinferred2 versions
<=0.5.1+ 1 more
- (no CPE)range: <=0.5.1
- (no CPE)range: <=0.5.1

Patches

Vulnerability mechanics

References

www.hardened-php.net/advisory_122005.60.htmlnvdPatchVendor Advisory
marc.infonvd
www.securityfocus.com/bid/14412nvd
www.usebb.net/community/topic.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/21651nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000