TI-2006-03057 CVE-2006-3157 · GHSA-92p5-m37f-fvrhCross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00…Priority LOW 29Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter.CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01342 · Published 2006-06-22 · No fix listed