CVEDB API

Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 56.0%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-8278

Invisioncommunity » Invision Power Board » Version: 3.3.1

cpe:2.3:a:invisioncommunity:invision_power_board:3.3.1
Invisioncommunity » Invision Power Board » Version: 3.3.2

cpe:2.3:a:invisioncommunity:invision_power_board:3.3.2
Invisioncommunity » Invision Power Board » Version: 3.3.3

cpe:2.3:a:invisioncommunity:invision_power_board:3.3.3
Invisioncommunity » Invision Power Board » Version: 3.3.4

cpe:2.3:a:invisioncommunity:invision_power_board:3.3.4
Invisioncommunity » Invision Power Board » Version: 3.4.0

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.0
Invisioncommunity » Invision Power Board » Version: 3.4.1

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.1
Invisioncommunity » Invision Power Board » Version: 3.4.2

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.2
Invisioncommunity » Invision Power Board » Version: 3.4.3

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.3
Invisioncommunity » Invision Power Board » Version: 3.4.4

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.4
Invisioncommunity » Invision Power Board » Version: 3.4.5

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.5
Invisioncommunity » Invision Power Board » Version: 3.4.6

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.6
Invisioncommunity » Invision Power Board » Version: 3.4.7

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.7
Invisioncommunity » Invision Power Board » Version: 3.4.8

cpe:2.3:a:invisioncommunity:invision_power_board:3.4.8