Description
Cross-site scripting (XSS) vulnerability in MercuryBoard before 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the title field of a PM (private message).
References
- mercuryboard-title-pm-xss(19797) vdb-entry
- 12872 vdb-entry
- 14679 third-party-advisory