Unscored CVE-2015-2989 EUVD-2015-3072GHSA-w4mf-q8hp-5fgh

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTM…

Published Sep 7, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter.

References

JVNDB-2015-000121 third-party-advisory
JVN#77193915 third-party-advisory