| Package | Affected versions | Patched versions |
|---|---|---|
| l-forum | = 2.4.0 |
Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free