$ cve CVE-2005-3955 JSON

CVE-2005-3955 EXPLOIT

4.3

MEDIUM · CVSS 2.0 · EPSS 5.6% (pctl 93)

Patch early

A public exploit exists.

Description

Multiple cross-site scripting (XSS) vulnerabilities in MagpieRSS 7.1, as used in (a) blogBuddiesv 0.3, (b) Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (2) rss_url parameter to (b) magpie_slashbox.php and (c) simple_smarty.php.

Scoring

CVSS	4.3 (MEDIUM, v2.0)
Vector	AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS	5.58% — more likely to be exploited than 93% of all CVEs
Weakness	CWE-79
On CISA KEV	no
Public exploit	yes
Published	2005-12-01
Last modified	2026-06-16

Affected (3)

Vendor	Product
blogbuddies	blogbuddies
jaws	jaws
magpierss	magpierss

Public exploits

Source	Title	Date
exploit-db	blogBuddies 0.3 - 'magpie_debug.php?url' Cross-Site Scripting	2005-11-23
exploit-db	blogBuddies 0.3 - 'magpie_slashbox.php?rss_url' Cross-Site Scripting	2005-11-23

References

→ the Explorer · watch your stack · NVD