medium4.3
CVE-2011-0909
Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter t…
Impact
Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanillaforums | Vanilla | through 2.0.17.5 Versions 2.0.9, 2.0.10, 2.0.11, 2.0.12, 2.0.13 |