|
Foxrum Multiple BBCode Tag Script Injection Vulnerabilities
foxrum is prone to multiple script injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input prior to including it in dynamically generated content. Attacker-supplied HTML and script code would be able to access properties of the site, potentially allowing for theft of cookie-based authentication credentials. Other attacks are also possible. These issues are reported to affect version 4.0.4f; other versions may also be vulnerable. |
|
|
Privacy Statement |
