Approved changes feed: RSS · Atom

cpe:2.3:a:vanillaforums:vanilla:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorVanillaforums (e59b661e-03d0-5928-b087-75b0895bb418)
ProductVanilla (7643dc8c-e1f4-59db-ad0b-7c9fe47202a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/vanilla/vanilla purl2cpe 2026-06-01 10:18:09.109410

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6557 not_vulnerable 2026-06-08 05:03:01.062023 Details available
Multiple cross-site scripting (XSS) vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the (1) AboutMe/RealName, (2) AboutMe/Name, (3) AboutMe/Quote, (4) AboutMe/Loc, (5) AboutMe/Emp, (6) AboutMe/JobTit, (7) AboutMe/HS, (8) AboutMe/Col, (9) AboutMe/Bio, (10) AboutMe/Inter, (11) AboutMe/Mus, (12) AboutMe/Gam, (13) AboutMe/Mov, (14) AboutMe/FTV, or (15) AboutMe/Bks parameter to the Edit My Details page. NOTE: some of these details are obtained from third party information.
Published: 2013-05-23T15:00:00.000Z
Updated: 2024-09-16T19:05:38.408Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.