medium4.8
CVE-2020-25119
The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.
Impact
The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vbulletin | Vbulletin | Version 5.6.3 |