description: It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.
problem types: CWE-79
affected:
{
product: vanilla forums
vendor: n/a
versions:
status: affected, version: vanilla forums before 2.0.10
}