Unrated

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/c...

CVE-2018-18668 First seen on SecPulse Aug 27, 2019

Original description The description as published by the source.

GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "homepage title" parameter, aka the adm/config_form_update.php cf_title parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
patch github.com
patch github.com

Key facts

Severity: Unrated
Published: Aug 27, 2019
First seen on SecPulse: Aug 27, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50