CVE-2007-2909 Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the....
LowCVSS 3.5
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_calendar366_xss_fix_plugin.xml update.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jelsoft vbulletin | <= 3.6.6 | No fix listed |
References
- 35156 vdb-entry
- www.vbulletin.com patch