medium4.8
CVE-2020-25124
The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.
Impact
The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vbulletin | Vbulletin | Version 5.6.3 |