| Title | PHPVibe 11.0.46 Cross Site Scripting |
|---|
| Description | A vulnerability classified as severe has been discovered in PHPVibe.This will affect the unknown part of the file functionalities.global.php.
Directly outputting unfiltered user's input parameter "site-logo-text" into HTML code can lead to cross site scripting vulnerabilities. |
|---|
| Source | ⚠️ https://github.com/WeikFu/PHPVibe-vulnerability-description/issues/1 |
|---|
| User | weikang fu (UID 70226) |
|---|
| Submission | 06/10/2024 17:12 (2 years ago) |
|---|
| Moderation | 06/17/2024 19:13 (7 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 268823 [PHPVibe 11.0.46 Global Options Page functionalities.global.php site-logo-text cross site scripting] |
|---|
| Points | 17 |
|---|