Five Star Review Script

five_star_review_script

Vendor: Review Script.com • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2006-3061

1Review Script.com

1Five Star Review Script

Apr 16, 2026

Jun 19, 2006

N/A· v4

N/A· v3

2.6 LOW· v2

Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web script or HTML via the (1) sort parameter in index2.php, (2) item_id parameter in report.php, (3) search_term parameter (aka the "search box") in search_reviews.php, (4) the profile field in usercp/profile_edit1.php, and the (5) review field in review_form.php.Show less