813 matches found
Vanilla cross-site scripting vulnerability (CNVD-2020-04666)
Vanilla is an open source multi-language, fully extensible forum program. A cross-site scripting vulnerability exists in Vanilla version 2.6.3 in index.php?p = / dashboard / settings / branding. The vulnerability stems from a lack of proper validation of client-side data in the web application. A...
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
Cross site scripting
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
CVE-2020-8825
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
CVE-2020-8825
Vanilla Forums 2.6.3 is affected by a stored cross-site scripting (XSS) vulnerability in index.php?p=/dashboard/settings/branding. The issue arises from insufficient input validation in the branding settings page, enabling an attacker to inject payloads that can execute in a user’s browser. The C...
CVE-2020-8825: Improper Neutralization of Input During Web Page Generation
index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS...
PT-2020-20308
Name of the Vulnerable Software and Affected Versions Vanilla version 2.6.3 Description The issue allows for stored XSS in the index.php?p=/dashboard/settings/branding endpoint. Recommendations For version 2.6.3, update to a newer version that contains a fix for this issue...
CVE-2011-1009
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
Code injection
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
CVE-2011-1009
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
CVE-2011-1009
CVE-2011-1009 affects Vanilla Forums versions 2.0.17.1–2.0.17.5, where an XSS flaw exists in /vanilla/index.php via the p parameter. The issue is validated by multiple connected sources (NVD entry and Red Hat/CVE pages). The vulnerability enables cross-site scripting within affected installations...
PT-2020-7089
Name of the Vulnerable Software and Affected Versions Vanilla Forums versions 2.0.17.1 through 2.0.17.5 Description The issue is related to a cross-site scripting XSS vulnerability. It affects the /vanilla/index.php endpoint via the p parameter. Recommendations For versions 2.0.17.1 through...
CVE-2011-1009: Improper Neutralization of Input During Web Page Generation
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter...
CVE-2011-3613
An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled...
CVE-2011-3614
An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9...