Every CVE Search/ Get API key

CVE-2005-0888

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0...

4.3 Medium

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.

Exploit likelihood

1.21%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.

Record
CVE-2005-0888
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.

Record
CVE-2005-0888
Updated
2026-11-02
EUVDEUVD-2005-0889 No score

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.

Record
EUVD-2005-0889
Updated
2026-11-03
GitHub AdvisoriesGHSA-vc4f-x28m-p38x No score

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0...

Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method name.

Record
GHSA-vc4f-x28m-p38x
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0888 is a medium vulnerability (CVSS 4.3) in Michael Dean Double Choco Latte, published March 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.21%, the 68th percentile. No source names a fixed version.

References

MoveEnter Open