Unrated

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/boa...

CVE-2018-18672 First seen on SecPulse Jul 24, 2019

Original description The description as published by the source.

GNUBOARD5 5.3.1.9 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board head contents" parameter, aka the adm/board_form_update.php bo_content_head parameter.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
patch github.com
patch github.com

Key facts

Severity: Unrated
Published: Jul 24, 2019
First seen on SecPulse: Jul 24, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51