Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0909
4.3
MEDIUMCVSS v2
Published
February 8, 2011
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526.
vanilla/vanilla
GitHubVanilla is a powerfully simple discussion forum you can easily customize to make as unique as your community.
GitHubVanilla is a powerfully simple discussion forum you can easily customize to make as unique as your community.= 2.0.16, = 2.0.9, = 2.0.10, = 2.0.11, = 2.0.12, = 2.0.13, = 2.0.14, = 2.0.15, = 2.0.17, = 2.0.17.2, = 2.0.17.3, = 2.0.17.4, <= 2.0.17.5, = 2.0.17.1NVD
vanilla
RubyGemsA bliki-type web content thing.
RubyGemsA bliki-type web content thing.= 2.0.16, = 2.0.9, = 2.0.10, = 2.0.11, = 2.0.12, = 2.0.13, = 2.0.14, = 2.0.15, = 2.0.17, = 2.0.17.2, = 2.0.17.3, = 2.0.17.4, <= 2.0.17.5, = 2.0.17.1NVD