← Database

CVE-2004-1827

MEDIUM CVSS: 4.3 Published: 2004-03-15 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.

Affected Platforms

Yabb YabbSimple Machines Simple Machines Smf

Weakness Type

NVD-CWE-Other

References