| Package | Affected versions | Patched versions |
|---|---|---|
| punbb | < 1.4.6 | 1.4.6 |
An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag allows (with authentication) injecting arbitrary JavaScript into any forum message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free