Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Hhh7Oxo

#46907of 53,633
5.4Total CVSS
Vulnerabilities · 1
PT-2022-12514
5.4
2022-01-19
Unknown · Javaquarkbbs · CVE-2021-46030
**Name of the Vulnerable Software and Affected Versions** JavaQuarkBBS versions prior to v3 **Description** The issue is related to a Cross Site Scripting attack (XSS) that occurs when specific statements are entered into the background tag management module. These statements are stored in the database and can attack the next victim who accesses the tag module. **Recommendations** For JavaQuarkBBS versions prior to v3, consider disabling the background tag management module until a patch is available to prevent the storage and execution of malicious scripts. Restrict access to the tag module to minimize the risk of exploitation. Avoid using the background tag management module until the issue is resolved.