FUDforum 3.1.1 is vulnerable to Stored XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://github.com/fudforum/FUDforum/commit/8ff446881932a45ce538b84a76f833d44eada93b | third party advisory patch |
https://github.com/fudforum/FUDforum/commit/aed69661b6f876c916abec9ca4fcf5035b8e2390 | third party advisory patch |