CVE-2019-18636 - A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter

Back Back to CVE browser

MEDIUM

A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter

Published Nov 1, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 0.65%

Description

A cross-site scripting (XSS) vulnerability in Jitbit .NET Forum (aka ASP.NET forum) 8.3.8 allows remote attackers to inject arbitrary web script or HTML via the gravatar URL parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://reallinkers.github.io/CVE-2019-18636/
x_refsource_MISCExploitThird Party Advisory
https://www.jitbit.com/asp-net-forum/versionhistory/
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://reallinkers.github.io/CVE-2019-18636/		x_refsource_MISCExploitThird Party Advisory
https://www.jitbit.com/asp-net-forum/versionhistory/		x_refsource_MISCRelease NotesVendor Advisory