CVE:CVE-2014-9685
CNNVD:CNNVD-201502-433
Vanilla Forums是加拿大Vanilla Forums公司的一款基于PHP的开源论坛程序。
Vanilla Forums 2.0.18.12及之前版本和2.1版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。
solution:Upgrade vanillaforums vanilla to a higher version than 2.0.18.12,and avoid the version (,2.0.18.12]; Upgrade vanillaforums vanilla_forums to a higher version than 2.1,and avoid the version 2.1