CVE-2020-8825

CVE-2020-8825 Publish: CVE-2020-8825 Vendor: root@kitploit: PHP VanillaForum Description: root@kitploit: The vulnerability exists due to insufficient sanitization of user-supplied data passed to "index.php?p=/dashboard/settings/branding" URL. A remote attacker can permanently inject and execute...

Vanilla Forum 2.6.3 Cross Site Scripting

CVE-2020-8825 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8825 Vendor: VanillaForum Description: It is possible to store xss payload in index.php?p=/dashboard/settings/branding. An attacker will store the xss payload on this section and when the user will visit the page then attacker...