SecBoard
Zurück zur CVE-Übersicht

CVE-2009-2217

MEDIUM(4.3)

AV:N/AC:M/Au:N/C:N/I:P/A:N

Risk Signal Score11/100 — NIEDRIG
  • CVSS 4.3 — Mittel

EPSS-Score

1%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

4.3

Technische Schwere

Beschreibung

Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag.

Referenzen