Description
Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kaspersky Lab | Vanilla Forums | Before 2.5 | — |
Unscored
CVE-2019-8279
EUVD-2019-17677GHSA-768c-fmgx-4fwr
Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.
Published Mar 2, 2019 · Updated Sep 17, 2024 · Assigned by Kaspersky