Description (CNA)
UBB.threads is vulnerable to Reflected XSS. The application improperly handles user input in certain requests, enabling attackers to execute arbitrary JavaScript in the context of a victim's browser by tricking them into clicking a crafted link. Because vendor contact attempts were unsuccessful, the vulnerability has only been confirmed in version 7.7.5 but may also affect other versions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| UBB Systems / UBB.threads | affected 0 through 7.7.5 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.