CVE-2015-1435
16.02.2015, 15:59
Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to index.php.
Vendor | Product | Version |
---|---|---|
mylittleforum | my_little_forum | 𝑥 ≤ 2.3.3 |
𝑥
= Vulnerable software versions
References