|
Navboard Multiple BBCode Tag Script Injection Vulnerabilities
Navboard is prone to multiple script injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input prior to including it in dynamically generated content. Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible. These issues are reported to affect versions V16 and V17beta2; other versions may also be vulnerable. |
|
|
Privacy Statement |
