TI-2005-04136 CVE-2005-4393 · GHSA-pvwv-hr7g-828hCross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier…Priority LOW 23Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) obcatid and (2) comid parameters.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01296 · Published 2005-12-20 · No fix listed