Unrated severityNVD Advisory· Published Aug 29, 2008· Updated Jun 16, 2026
CVE-2008-3874
CVE-2008-3874
Description
Cross-site scripting (XSS) vulnerability in account.php in Lussumo Vanilla 1.1.5-rc1, 1.1.4, and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Value field (aka Label ==> Value pairs). NOTE: some of these details are obtained from third party information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:lussumo:vanilla:*:*:*:*:*:*:*:*range: <=1.1.5-rc1
- cpe:2.3:a:lussumo:vanilla:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:lussumo:vanilla:1.1.4:*:*:*:*:*:*:*
- (no CPE)range: <=1.1.5-rc1
Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/30748nvdExploit
- secunia.com/advisories/31527nvdVendor Advisory
- lussumo.com/community/discussion/8559/vanilla-115-release-candidate-1/nvd
- lussumo.com/docs/doku.phpnvd
- securityreason.com/securityalert/4176nvd
- www.gulftech.orgnvd
- www.securityfocus.com/archive/1/495577/100/0/threadednvd
News mentions
0No linked articles in our index yet.