CVE-2021-40509

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

CVE-2021-40509

CVE-2021-40509 affects JForum2 2.7.0. A cross-site scripting (XSS) vulnerability exists in ViewCommon.java where user input (signature) is not properly handled, allowing injection of malicious scripts. Documents confirm the vulnerable component and file, the root cause is inadequate input sanitiz...