CVE-2020-28141

CVE-2020-28141 affects Online Discussion Forum 1.0. The vulnerability is a reflected/stored XSS in the message body: an authenticated attacker can send messages containing JavaScript to other users, which executes when those users view the messages page. Sources in the connected documents confirm...