Description
phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | phpbb/phpbb | >= 3.2.7, < 3.2.8 | 3.2.8 | GHSA-8hc2-hvrc-x4qr |
High · 7.5
CVE-2019-16108
EUVD-2022-3186GHSA-8hc2-hvrc-x4qr
phpBB arbitrary CSS injection
Published Mar 19, 2020 · Updated Aug 5, 2024 · Assigned by mitre