4 matches found
CVE-2018-6506
Cross-Site Scripting XSS exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field...
4.8CVSS5.8AI score0.00529EPSS
SaveExploits1References1
CVE-2018-6506
Cross-Site Scripting XSS exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use of an onload attribute of an SVG element in the supertitle field...
4.8CVSS5AI score0.00529EPSS
SaveExploits1References1
CVE-2018-6506
Affected software: miniBB 3.2.2. Vulnerability: Cross-Site Scripting (XSS) in the Add Forum feature of the Administrative Panel. Root cause: crafted use of an onload attribute of an SVG element in the supertitle field. Impact (as stated): enables script execution in the context of the user’s brow...
4.8CVSS4.9AI score0.00529EPSS
SaveExploits1References1Affected Software1
20