Vulnerability Description
XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16.
CVSS Score
6.1
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Xmbforum2 | Xmb | >= 1.9.1, < 1.9.11.16 |
| Php | Php | 5.0.0 |
Related Weaknesses (CWE)
References
- https://docs.xmbforum2.com/index.php?title=Security_Issue_HistoryVendor Advisory
- https://forums.xmbforum2.com/viewthread.php?tid=777105PatchVendor Advisory
- https://www.xmbforum2.com/Vendor Advisory
- https://docs.xmbforum2.com/index.php?title=Security_Issue_HistoryVendor Advisory
- https://forums.xmbforum2.com/viewthread.php?tid=777105PatchVendor Advisory
- https://www.xmbforum2.com/Vendor Advisory
FAQ
What is CVE-2021-29399?
CVE-2021-29399 is a vulnerability with a CVSS score of 6.1 (MEDIUM). XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11...
How severe is CVE-2021-29399?
CVE-2021-29399 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-29399?
Check the references section above for vendor advisories and patch information. Affected products include: Xmbforum2 Xmb, Php Php.