CVE-2023-0549 YAFNET Private Message PostPrivateMessage cross site scripting

A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. T...

CVE-2023-0549 YAFNET Private Message PostPrivateMessage cross site scripting

A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. T...

CVE-2023-0549

A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. T...

CVE-2023-0549

The CVE-2023-0549 issue affects YAFNET up to version 3.1.10 in the Private Message Handler’s /forum/PostPrivateMessage processing. The root cause is manipulation of the subject and message parameters, leading to cross-site scripting. The vulnerability can be triggered remotely; the exploit has be...

PT-2023-16354 · Yafnet · Yafnet

Name of the Vulnerable Software and Affected Versions: YAFNET versions up to 3.1.10 Description: A problematic issue has been found in the Private Message Handler component, affecting the processing of the file /forum/PostPrivateMessage. The manipulation of the subject and message arguments leads...

YAFNET cross-site scripting vulnerabilities

YAFNET is an ASP.NET open source forum solution for YAFNET individual developers. A cross-site scripting vulnerability exists in YAFNET version 3.1.9, 3.1.10, which stems from incorrect manipulation of the parameters subject and message resulting in cross-site scripting...

CVE-2023-0549: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/message leads to cross site scripting. T...