Every CVE Search/ Get API key

CVE-2006-2821

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote...

6.8 MediumPublic exploit

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php.

Exploit likelihood

1.93%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php.

Record
CVE-2006-2821
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php.

Record
CVE-2006-2821
Updated
2026-11-02
EUVDEUVD-2006-2818 No score

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php.

Record
EUVD-2006-2818
Updated
2026-11-03
GitHub AdvisoriesGHSA-2424-5f9c-864m No score

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote...

Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php.

Record
GHSA-2424-5f9c-864m
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-2821 is a medium vulnerability (CVSS 6.8) in Deltascripts Pro Publish, published June 5, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.93%, the 80th percentile. No source names a fixed version.

References

MoveEnter Open