CVE-2023-34461

PyBB XSS in 0.1.0 : A manual review shows PyBB 0.1.0 allowed submission of arbitrary HTML (e.g., xss) that could execute client-side JS. The issue was patched in commit 5defd92; upgrade to 0.1.1 is advised. If upgrading isn’t possible, workarounds include removing post creation, removing the |saf...