Vulnerabilidades de Xmbforum2
CVEs publicadas que afetam produtos de Xmbforum2: 1 registro(s), com severidade, exploração e correções.
CVE-2024-58292
Média · 5.3
CWE-79 11/12/2025
XMB Forum 1.9.12.06 Persistent Cross-Site Scripting via Admin Templates
XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript into templates and front page settings. Attackers can insert XSS payloads in footer templates and news ticker fields, enabling script execution for all forum users when pages are rendered.