Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 4:1 p.m.6 views

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

5.4CVSS6.6AI score0.01875EPSS
Exploits5References1
0day.today
0day.today
added 2020/02/11 12:0 a.m.68 views

Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting Exploit Author: Sayak Naskar Vendor Homepage: https://vanillaforums.com/en/ Version: 2.6.3 Tested on: Windows, Linux CVE : CVE-2020-8825 A Stored xss was found in Vanillafor...

3.5CVSS5.6AI score0.01875EPSS
Exploits5
exploitpack
exploitpack
added 2020/02/11 12:0 a.m.91 views

Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting

Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting Exploit Title: Vanilla Forums 2.6.3 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-02-10 Exploit Author: Sayak Naskar Vendor Homepage: https://vanillaforums.com/en/ Version: 2.6.3 Tested on: Windows, Linux CVE : CVE-2020-8825 A...

3.5CVSS5.4AI score0.01875EPSS
Exploits5
NVD
NVD
added 2020/02/10 12:15 p.m.36 views

CVE-2020-8825

index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...

5.4CVSS5.4AI score0.01875EPSS
Exploits5References2
CVE
CVE
added 2020/02/10 11:14 a.m.93 views

CVE-2020-8825

Vanilla Forums 2.6.3 is affected by a stored cross-site scripting (XSS) vulnerability in index.php?p=/dashboard/settings/branding. The issue arises from insufficient input validation in the branding settings page, enabling an attacker to inject payloads that can execute in a user’s browser. The C...

5.4CVSS5.3AI score0.01875EPSS
Exploits5References2Affected Software1
Packet Storm
Packet Storm
added 2020/02/10 12:0 a.m.118 views

Vanilla Forum 2.6.3 Cross Site Scripting

CVE-2020-8825 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8825 Vendor: VanillaForum Description: It is possible to store xss payload in index.php?p=/dashboard/settings/branding. An attacker will store the xss payload on this section and when the user will visit the page then attacker...

3.5CVSS0.01875EPSS
Exploits5
Rows per page
Query Builder