← Database

CVE-2008-4513

MEDIUM CVSS: 4.3 Published: 2008-10-09 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in BBcode API module in Phorum 5.2.8 allows remote attackers to inject arbitrary web script or HTML via nested BBcode image tags.

Affected Platforms

Phorum Phorum

Weakness Type

CWE-79

References