CVE-2023-0549

The CVE-2023-0549 issue affects YAFNET up to version 3.1.10 in the Private Message Handler’s /forum/PostPrivateMessage processing. The root cause is manipulation of the subject and message parameters, leading to cross-site scripting. The vulnerability can be triggered remotely; the exploit has be...

YAFNET 跨站脚本漏洞

YAFNET is an ASP.NET open source forum solution for YAFNET individual developers. A cross-site scripting vulnerability exists in YAFNET version 3.1.9, 3.1.10, which stems from incorrect manipulation of the parameters subject and message resulting in cross-site scripting...

PT-2023-16354 · Yafnet · Yafnet

Name of the Vulnerable Software and Affected Versions: YAFNET versions up to 3.1.10 Description: A problematic issue has been found in the Private Message Handler component, affecting the processing of the file /forum/PostPrivateMessage. The manipulation of the subject and message arguments leads...