Description phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode. Remediation References CVE-2019-16108 Related Vulnerabilities Vanilla Forums Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2018-18903) WordPress 6.2.x Multiple Vulnerabilities (6.2 - 6.2.5) WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Cross-Site Scripting (3.7.0.0) Osclass Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-6308) Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9517) Severity High Classification CVE-2019-16108 CWE-94 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities