CVE-2012-6555

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

CVE-2012-6555

CVE-2012-6555 is an XSS vulnerability in the Vanilla Forums LatestComment plugin 1.1. The issue allows remote attackers to inject arbitrary script/HTML via the discussion title, indicating a flaw in input handling within the plugin’s comment/discussion title processing. The CVSS data in the prima...