TI-2005-00442 CVE-2005-0485 · GHSA-86q3-5fx8-mg6mCross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena…Priority LOW 34Cross-site scripting (XSS) vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01827 · Published 2005-02-19 · No fix listed CWE-79