Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.

Published Mar 13, 2020 · Updated Aug 7, 2024 · Assigned by mitre