{
    "id": "CVE-2003-1506",
    "published": "2003-12-31 05:00:00",
    "last_modified": "2026-06-16 22:04:33",
    "cvss_score": "4.3",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "cwe": "CWE-79",
    "description": "Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.",
    "epss_score": "0.01734",
    "epss_percentile": "0.76979",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-09 18:17:04",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "daniel_barron",
            "product": "dansguardian"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "23275",
            "title": "DansGuardian 2.2.x - Denied URL Cross-Site Scripting",
            "date": "2003-10-22",
            "url": "https://www.exploit-db.com/exploits/23275"
        }
    ],
    "refs_list": [
        "http://securityreason.com/securityalert/3299",
        "http://www.securityfocus.com/archive/1/342160",
        "http://www.securityfocus.com/archive/1/342551",
        "http://www.securityfocus.com/archive/1/342577",
        "http://www.securityfocus.com/bid/8876",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/13507",
        "http://securityreason.com/securityalert/3299",
        "http://www.securityfocus.com/archive/1/342160",
        "http://www.securityfocus.com/archive/1/342551",
        "http://www.securityfocus.com/archive/1/342577",
        "http://www.securityfocus.com/bid/8876",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/13507"
    ]
}