Cross site scripting

2019-03-0201:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.

CPENameOperatorVersion
vanilla_forumslt2.5.0

CPE	Name	Operator	Version
	vanilla_forums	lt	2.5.0

References

scriptinjection.blogspot.com/2019/02/vanilla-forums-25-stored-xss-in-any.html