CWE-79

CVE-2020-25118

February 26, 2023 by

The Admin CP in vBulletin 5.6.3 allows XSS via a Style Options Settings Title to Styles Manager.

February 26, 2023 by

The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.

February 26, 2023 by

The Admin CP in vBulletin 5.6.3 allows XSS via the admincp/search.php?do=dosearch URI.

February 26, 2023 by

The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.

February 26, 2023 by

The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.

February 26, 2023 by

The Admin CP in vBulletin 5.6.3 allows XSS via a Smilie Title to Smilies Manager.