CVE-2018-18671

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "mobile board head contents" parameter, aka the adm/boardformupdate.php bomobilecontenthead parameter...

CVE-2018-18671

creationtimestamp| type| source ---|---|--- 2019-07-23 20:33:50+00:00| seen| https://t.me/cibsecurity/5671...

CVE-2018-18671

GNUBOARD5 5.3.1.9 contains a Cross-Site Scripting vulnerability due to lack of validation in the bo_mobile_content_head parameter (adm/board_form_update.php). The issue enables remote attackers to inject arbitrary script via the mobile board head contents field. CVSS metrics indicate MEDIUM sever...