CVE-2020-25121

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options...

CVE-2020-25121

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options...

CVE-2020-25121: Improper Neutralization of Input During Web Page Generation

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options...

PT-2020-15961

Name of the Vulnerable Software and Affected Versions vBulletin version 5.6.3 Description The issue concerns a problem with the Admin CP in vBulletin, where an XSS attack can be performed via the Paid Subscription Email Notification field in the Options. Recommendations For vBulletin version 5.6....