Unrated

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/bo...

CVE-2018-18669 First seen on SecPulse Jul 24, 2019

Original description The description as published by the source.

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board title contents" parameter, aka the adm/board_form_update.php bo_subject parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
patch github.com
patch github.com

Key facts

Severity: Unrated
Published: Jul 24, 2019
First seen on SecPulse: Jul 24, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51