CVE-2005-4460

Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote...

5.1 MediumPublic exploit

Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php.

Exploit likelihood

2.09%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 5.1

Record: CVE-2005-4460
CVSS 2.0: 5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2005-4460
Updated: 2026-11-02

EUVDEUVD-2005-4455 No score

Record: EUVD-2005-4455
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hhm2-3v7q-xp8q No score

Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote...

Record: GHSA-hhm2-3v7q-xp8q
Updated: 2026-11-02

Affected products

beehive forum forum

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Beehive Forum 0.6.2 - Multiple HTML Injection Vulnerabilities	2005-12-21

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-4460 is a medium vulnerability (CVSS 5.1) in Beehive Forum Forum, published December 21, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. No source names a fixed version.