CVE-2002-1480

CVE-2002-1480 describes a Cross-Site Scripting (XSS) vulnerability in phpGB versions prior to 1.20, allowing remote attackers to inject malicious HTML or script into guestbook entries. This code executes when an administrator attempts to delete the compromised entry. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring medium attack complexity but potentially leading to partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild, an exploit for HTML injection exists on ExploitDB, and the CVE has garnered significant community discussion.