CVE-2020-25121: XSS
Published Sep 3, 2020
·Updated
The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.
Affected Software
1 affected component
vBulletin vBulletin=5.6.3
Event History
Sep 3, 2020
CVE Published
via MITRE·05:19 PM
Data Sourced
via MITRE·05:19 PM
Description
Frequently Asked Questions
1
What is CVE-2020-25121?
CVE-2020-25121 is a vulnerability in the Admin CP of vBulletin 5.6.3 that allows XSS via the Paid Subscription Email Notification field in the Options.
2
What software versions are affected by CVE-2020-25121?
vBulletin version 5.6.3 is affected by CVE-2020-25121.
3
What is the severity of CVE-2020-25121?
CVE-2020-25121 has a severity keyword of 'medium' and a severity value of 4.8.
4
What is the Common Weakness Enumeration (CWE) ID of CVE-2020-25121?
CVE-2020-25121 is associated with CWE-79, which is the Weakness ID for Cross-Site Scripting (XSS).
5
How can I fix CVE-2020-25121?
To fix CVE-2020-25121, upgrade vBulletin to a version that includes a patch for this vulnerability.