CVE-2011-5138

The CVE‑2011‑5138 entry describes a cross‑site scripting (XSS) vulnerability in tForum b0.915, specifically in member.php under the viewprofile action where the username parameter can inject arbitrary web script/HTML. Affected component: tForum (version b0.915); vulnerability type: XSS. Root caus...