Description

Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.

Remediation

References

CVE-2019-8279

Related Vulnerabilities

WordPress Plugin ThirstyAffiliates Affiliate Link Manager Cross-Site Scripting (3.9.2)

Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1599)

Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-1854)

Oracle Database Server CVE-2024-20995 Vulnerability (CVE-2024-20995)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-10008)

Severity

Medium

Classification

CVE-2019-8279 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities