Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a usersrecentposts action.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Yabb | Yabb | 2.0_rc1 (including) | 2.0_rc1 (including) |