2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...
4.3CVSS6.1AI score0.01669EPSS
SaveExploits0References4Affected Software1
CVE-2012-6670: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in 1 actions/nominatemedal.php or 2 actions/requestmedal.php...
6.1CVSS6.4AI score0.01669EPSS
SaveExploits0References2
20