Description

Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526.

Remediation

References

CVE-2011-0909

Related Vulnerabilities

WordPress Plugin Wechat Reward Cross-Site Request Forgery (1.7)

WordPress Plugin LeagueManager Multiple Cross-Site Scripting Vulnerabilities (3.7)

Joomla! Core 3.x.x Cross-Site Scripting (3.2.0 - 3.9.3)

MySQL CVE-2021-2170 Vulnerability (CVE-2021-2170)

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4297)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2011-0909