PT-2020-15960

Name of the Vulnerable Software and Affected Versions vBulletin version 5.6.3 Description The issue affects the Admin CP in vBulletin, where an XSS attack can be performed via the admincp/search.php?do=dosearch URI. Recommendations For version 5.6.3, consider restricting access to the...

CVE-2020-25120: Improper Neutralization of Input During Web Page Generation

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI...