← All advisories

Unrated severityNVD Advisory· Published Sep 3, 2020· Updated Aug 4, 2024

CVE-2020-25121

CVE-2020-25121

Description

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.

Affected products

2

vBulletin/vBulletindescription
Jelsoft/Vbulletinllm-fuzzy
Range: =5.6.3

Patches

Vulnerability mechanics

References

1

pentest-vincent.blogspot.com/2020/09/vbulletin-563-multiple-persistent-cross.htmlmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.