Improper input validation in Vanillaforums Vanilla

CVE-2011-0908

Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerab…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (45.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References