2 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in Simple Machines Forum SMF 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the 1 recipient or 2 BCC field when selecting send in a pm action...
6CVSS5.6AI score0.02133EPSS
SaveExploits1References10Affected Software1
CVE-2007-0399: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in index.php in Simple Machines Forum SMF 1.1 RC3 allow remote authenticated users to inject arbitrary web script or HTML via the 1 recipient or 2 BCC field when selecting send in a pm action...
6CVSS5.8AI score0.02133EPSS
SaveExploits1References1
20