Unrated severityNVD Advisory· Published Nov 10, 2006· Updated Apr 23, 2026

CVE-2006-5853

Description

Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attackers to inject arbitrary web script or HTML via the lang parameter, which is returned to the client in a lang cookie.

Affected products

Immediacy/Immediacy .net CMS
cpe:2.3:a:immediacy:immediacy_.net_cms:5.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/archive/1/450960nvdExploit
www.securityfocus.com/bid/20965nvdExploitVendor Advisory
securityreason.com/securityalert/1845nvd
www.procheckup.com/Vulner_PR0506.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/30136nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000