medium6.1
CVE-2018-17571
Vanilla before 2.6.1 allows XSS via the email field of a profile.
Impact
Vanilla before 2.6.1 allows XSS via the email field of a profile.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanillaforums | Vanilla | before 2.6.1 |