← All advisories

Medium severity5.4NVD Advisory· Published Mar 2, 2019· Updated Jun 17, 2026

CVE-2019-8279

CVE-2019-8279

Description

Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Vanilla OS/Vanilla Forumsllm-fuzzy
Range: <2.5
Kaspersky Lab/Vanilla Forumsv5
Range: Before 2.5

Patches

Vulnerability mechanics

References

1

scriptinjection.blogspot.com/2019/02/vanilla-forums-25-stored-xss-in-any.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.