Every CVE Search/ Get API key

CVE-2005-3841

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other...

4.3 Medium

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.

Exploit likelihood

1.26%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.

Record
CVE-2005-3841
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.

Record
CVE-2005-3841
Updated
2026-11-02
EUVDEUVD-2005-3836 No score

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.

Record
EUVD-2005-3836
Updated
2026-11-03
GitHub AdvisoriesGHSA-qgr8-fx9m-6qf5 No score

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other...

Cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400), and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchfor search parameter.

Record
GHSA-qgr8-fx9m-6qf5
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-3841 is a medium vulnerability (CVSS 4.3) in Kplaylist, published November 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. No source names a fixed version.

References

MoveEnter Open