VulnerabilityModified

CVE-2008-0913

Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context.

MEDIUM 4.3EPSS 0.84%

Does this matter?

Lower severity and a low EPSS score (0.84%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via crafted BBCodes in an unspecified context.

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 0.84% probability · 56th percentile
CISA KEV: Not listed
Weakness: CWE-79
Affected: invision power services/invision power board
Source: cve@mitre.org

References

http://forums.invisionpower.com/index.php?showtopic=269961Patch
http://secunia.com/advisories/29055Vendor Advisory
http://forums.invisionpower.com/index.php?showtopic=269961Patch
http://secunia.com/advisories/29055Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.