VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 19, 2018· Updated Jun 17, 2026

CVE-2018-12580

CVE-2018-12580

Description

library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Dragonbyte Technologies/vBSecurityllm-create
    Range: <=3.3.0
  • Dragonbyte Tech/Vbsecurity2 versions
    cpe:2.3:a:dragonbyte-tech:vbsecurity:*:*:*:*:*:vbulletin3:*:*+ 1 more
    • cpe:2.3:a:dragonbyte-tech:vbsecurity:*:*:*:*:*:vbulletin3:*:*range: >=3.0.0,<=3.3.0
    • cpe:2.3:a:dragonbyte-tech:vbsecurity:*:*:*:*:*:vbulletin4:*:*range: >=3.0.0,<=3.3.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.