Security Advisory

CVE-2014-9685

4.3

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published Date February 25, 2015
Official Source NIST NVD Advisory