VULHUB ™

phpBB does not properly sanitize user input in forum postings. This could allow a malicious user to inject script code into a forum post which would in turn be executed when the page is viewed by other users. Script code would be executed in the security context of the phpBB site. Supplied script code may access authentication credentials, or take actions as an authenticated user.

phpBB does not properly sanitize user input in forum postings. This could allow a malicious user to inject script code into a forum post which would in turn be executed when the page is viewed by other users. Script code would be executed in the security context of the phpBB site. Supplied script code may access authentication credentials, or take actions as an authenticated user.