Postnuke Software Foundation : Security Vulnerabilities, CVEs, (XSS) CVSS score >= 3
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.
Max CVSS
5.0
EPSS Score
4.74%
Published
2002-07-03
Updated
2017-07-11
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
Max CVSS
7.5
EPSS Score
0.65%
Published
2002-08-12
Updated
2008-09-05
Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.
Max CVSS
4.3
EPSS Score
0.14%
Published
2004-12-31
Updated
2008-09-05
Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Max CVSS
5.1
EPSS Score
1.60%
Published
2007-01-19
Updated
2008-11-13
4 vulnerabilities found