← All advisories

Medium severity4.8NVD Advisory· Published Sep 3, 2020· Updated Jun 17, 2026

CVE-2020-25119

CVE-2020-25119

Description

The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.

Affected products

3

Jelsoft/Vbulletin2 versions
cpe:2.3:a:vbulletin:vbulletin:5.6.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vbulletin:vbulletin:5.6.3:*:*:*:*:*:*:*
- (no CPE)range: =5.6.3
vBulletin/vBulletindescription

Patches

Vulnerability mechanics

References

1

pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.