CVE-2025-48933 in Communityinfo

Prediction

by VulDB Data Team • 07/30/2025

A flaw has been found in Invision Community up to 4.7.20/5.0.7. Affected by this vulnerability is an unknown functionality of the file oauth/callback/index.php. Executing a manipulation of the argument state can lead to cross site scripting. The attack may be launched remotely. Upgrading to version 4.7.21 and 5.0.8 addresses this issue. Upgrading the affected component is recommended.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

Interested in the pricing of exploits?

See the underground prices here!