CVE-2011-0455 Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Things BBS before 2.0.3 and BBS Thread before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| thingslabo things bbs | <= 2.0.2 | No fix listed |
| thingslabo things bbs | = 1.0.4 | No fix listed |
| thingslabo things bbs | = 1.1.0 | No fix listed |
| thingslabo things bbs | = 2.0.0 | No fix listed |
| thingslabo things bbs | = 2.0.1 | No fix listed |
| thingslabo bbs thread | <= 2.0.2 | No fix listed |
| thingslabo bbs thread | = 1.0.0 | No fix listed |
| thingslabo bbs thread | = 2.0.0 | No fix listed |
| thingslabo bbs thread | = 2.0.1 | No fix listed |
References
- JVN#20982938 third-party-advisory
- JVNDB-2011-000015 third-party-advisory
- 43524 third-party-advisory vendor-advisory
- 46638 vdb-entry
- www.thingslabo.com patch
- www.thingslabo.com patch
- bbs-bbsthread-unspecified-xss(65852) vdb-entry