Описание
Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user, (3) email, or (4) Real Name fields in a profile.
Ссылки
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:simple_php_forum:simple_php_forum:0.6.1:*:*:*:*:*:*:*
EPSS
Процентиль: 52%
0.00285
Низкий
2.6 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
почти 4 года назад
Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags when BBcode is disabled; or the (2) user, (3) email, or (4) Real Name fields in a profile.
EPSS
Процентиль: 52%
0.00285
Низкий
2.6 Low
CVSS2
Дефекты
CWE-79