low3.5Public exploit code
CVE-2015-6810
Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 all…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Invision Power Board (IP.Board) 4.x - Persistent Cross-Site Scripting2015-08-27 · webapps · php
Impact
Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invisionpower | Invision Power Board | Versions 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5.1 |