Skip to content

CVE-2002-0535

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to...

5.0 MediumPublic exploit

CVE-2002-0535 is a medium vulnerability (CVSS 5.0) in Postboard, published June 11, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.36%, the 94th percentile. No source names a fixed version.

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Exploit likelihood

7.36%Up 2.9 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Record: CVE-2002-0535
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Record: CVE-2002-0535
Updated: 2026-11-02

EUVDEUVD-2002-0530 No score

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Record: EUVD-2002-0530
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rg69-mc23-3q8q No score

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to...

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

Record: GHSA-rg69-mc23-3q8q
Updated: 2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PostBoard 2.0 - BBCode IMG Tag Script Injection	2002-04-19
Exploit-DB	PostBoard 2.0 - Topic Title Script Execution	2002-04-19

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References