CVE-2021-29399: XSS
Published Apr 19, 2021
·Updated
XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16.
Affected Software
6 affected components
Xmbforum2 Xmb>=1.9.1<1.9.11.16
PHP PHP=5.0.0
Xmbforum2 Xmb>=1.9.11<1.9.11.16
Xmbforum2 Xmb>=1.9.12<1.9.12.03
PHP PHP=7.0.0
PHP PHP=8.0.0
Remediation
Patch Available
Event History
Apr 19, 2021
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this XMB vulnerability?
The vulnerability ID for this XMB vulnerability is CVE-2021-29399.
2
What is the title of this XMB vulnerability?
The title of this XMB vulnerability is 'XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input.'
3
What is the severity of CVE-2021-29399?
The severity of CVE-2021-29399 is medium with a CVSSv3 score of 6.1.
4
How does CVE-2021-29399 affect XMB installations?
CVE-2021-29399 affects all versions of XMB.
5
How can I fix CVE-2021-29399 in XMB installations?
All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16 to fix CVE-2021-29399.