Cross site scripting

Cross-site scripting XSS vulnerability in Invision Power IP.Board aka IPB or Power Board 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x through 1.5.9, as downloaded before 20140424, allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2014-3149

Cross-site scripting XSS vulnerability in Invision Power IP.Board aka IPB or Power Board 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x through 1.5.9, as downloaded before 20140424, allows remote attackers to inject arbitrary web script or HTML via unspecified...

CVE-2014-3149

CVE-2014-3149 is a reflected XSS in Invision Power IP.Board (IP.Board) versions 3.3.x and 3.4.x up to 3.4.6 (and IP.Nexus 1.5.x up to 1.5.9). The vulnerability allows injection of arbitrary web script via unspecified vectors and is categorized as low severity with limited exploitability; vendor p...

CVE-2014-3149: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Invision Power IP.Board aka IPB or Power Board 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x through 1.5.9, as downloaded before 20140424, allows remote attackers to inject arbitrary web script or HTML via unspecified...