TI-2006-00395 CVE-2006-0409 · GHSA-6rj8-pfw7-h6cqCross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows…Priority LOW 24Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01976 · Published 2006-01-25 · No fix listed