CVE-2015-6810
Beschrijving NL
Cross-site scripting (XSS) kwetsbaarheid in Invision Power Services IPS Community Suite (ook bekend als Invision Power Board, IPB of Power Board) 4.x vóór 4.0.12.1 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via de event_location[adres] array-parameter naar agenda/indienen/.
Origineel (Engels) tonen
Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/.