Description
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context.
References
- 29055 third-party-advisory
- http://forums.invisionpower.com/index.php?showtopic=269961