PT-2021-18684

Name of the Vulnerable Software and Affected Versions Invision Community IPS Community Suite versions prior to 4.5.4.2 Description The issue allows SQL Injection via the Downloads REST API, specifically through the sortDir parameter in a sortBy=popular action to the GETindex method in...

CVE-2021-3025: Improper Neutralization of Special Elements used in an SQL Command

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API the sortDir parameter in a sortBy=popular action to the GETindex method in applications/downloads/api/files.php...

PT-2021-18688

Name of the Vulnerable Software and Affected Versions Invision Community IPS Community Suite versions prior to 4.5.4.2 Description The issue allows for XSS during the quoting of a post or comment. Recommendations For versions prior to 4.5.4.2, update to version 4.5.4.2 or later to resolve the iss...

CVE-2021-3026: Improper Neutralization of Input During Web Page Generation

Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment...