XSS in Invision Power Services Board

CVE-2008-0913

Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.008 (54.3th percentile) — read the EPSS interpretation.

Affected products

Invision_power_services Invision_power_board — versions 2.3.4
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch)