Invision Power Board SSI.PHP Cross-Site Scripting Vulnerability

Invision Power Board SSI.PHP Cross-Site Scripting Vulnerability

Invision Power Board 'ssi.php' script reported prone to a cross-site scripting vulnerability. The issue presents itself due to a lack of sufficient sanitization performed by functions in the 'ssi.php' script on user-influenced 'f' parameter. This can permit the theft of cookie-based authentication credentials; other attacks may also be possible.