| Package | Affected versions | Patched versions |
|---|---|---|
| simple machines smf | = 1.0_b | |
| yabb | = 1.5.1= 1_gold_-_sp_1.3 |
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free