Security Advisory
CVE-2018-18678
6.1
MEDIUM
Vulnerability Description
GNUBOARD5 before 5.3.2.0 has XSS that allows remote attackers to inject arbitrary web script or HTML via the "board group extra contents" parameter, aka the adm/boardgroup_form_update.php gr_1~10 parameter.
Published Date
October 30, 2019
Official Source
NIST NVD Advisory