description: Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.
problem types: Multiple XSS
affected:
{
product: Vanilla Forums
vendor: Kaspersky Lab
versions:
status: affected, version: Before 2.5
}