CVE-2009-2217

NBBC (a BBCode library) is affected by a Cross-site scripting (XSS) vulnerability in versions before 1.4.2, allowing remote attackers to inject arbitrary script or HTML via an invalid URL in a BBCode img tag. Affected component: NBBC; Root cause: improper handling of URLs in img tags leading to s...