• info
• discussion
• exploit
• solution
• references

ThWboard Cross-Site Scripting Vulnerability

It has been reported that ThWboard is prone to a cross-site scripting vulnerability. The issue is reported to exist due insufficient sanitization of user-supplied data. The problem may allow a remote attacker to execute HTML or script code in the browser of a user following a malicious link created by an attacker.

Successful exploitation of this attack may allow an attacker to steal cookie-based authentication information that could be used to launch further attacks.

ThWboard versions 2.8 and 2.81 may be prone to this issue, however other versions may be affected as well.