CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in WP Discussion Board Discussion Board allows Content Spoofing, Cross-Site Scripting (XSS).This issue affects Discussion Board: from n/a through 2.4.8.
Explanation of Vulnerability in Simple Terms
WP Discussion Board versions up to 2.4.8 contain a cross-site scripting (XSS) vulnerability that allows authenticated users to inject malicious scripts. An attacker with low-level access can modify content in ways that affect site integrity or availability. The vulnerability requires an authenticated account but no additional user interaction to exploit.
What an attacker can do
Inject malicious scripts that modify site content or disrupt functionality for other users.
Potential impact on your site
Authenticated users can inject code affecting site integrity and availability; requires account restrictions or immediate patching.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
