← Database

CVE-2007-2910

MEDIUM CVSS: 4.3 Published: 2007-05-30 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the vb_367_xss_fix_plugin.xml update, a related issue to CVE-2007-2909.

Affected Platforms

Jelsoft Vbulletin

Weakness Type

CWE-79

References