PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters.
7AI Score
0.002EPSS
Cross-site scripting (XSS) vulnerability in PHP-Post before 0.33 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
5.9AI Score
0.002EPSS