CVE-2018-15559

Xiuno BBS 4.0.4 contains a stored XSS vulnerability in its editor. Multiple sources (NVD/CNVD) confirm the flaw and, per CNVD-2018-16946, a remote attacker could exploit it via a published post to steal administrator cookies. No remediation details are provided in the supplied documents.

CVE-2018-15559

The editor in Xiuno BBS 4.0.4 allows stored XSS...