Unscored CVE-2023-39777 EUVD-2023-43477GHSA-8mfq-mqv3-25m4

A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary we…

Published Sep 16, 2023 · Updated Sep 25, 2024 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter.

Advisories 1

WID-SEC-2023-2374 vBulletin Connect: Schwachstelle ermöglicht Cross-Site Scripting BSI CERT-Bund (WID) · Sep 17, 2023

References

https://gist.github.com/GiongfNef/8fe658dce4c7fcf3a7b4e6387e50141c