| Overview : |
| phpBB version 3.2.7 allows the stealing of an Administration Control Panel session id by leveraging CSRF in the Remote Avatar feature. The CSRF Token Hijacking leads to stored XSS |
| Affected Product(s) : |
|
| Vulnerability Details : |
||||
Solution : The vulnerability was fixed in version 3.2.8 |
Description Persistent XSS (or Stored XSS) attack is one of the three major categories of XSS attacks, the others being
Description Several Cross-Site Scripting vulnerabilities in the Curtain WordPress plugin. Due to these Cross-Site Scripting vulnerabilities, an attacker would be
Description It was noted that there is security checking to prevent some of the Avast processes from loading of undesired/unsigned