Vbulletin: >> Vbulletin >> 5.6.3 Security Vulnerabilities
The Admin CP in vBulletin 5.6.3 allows XSS via the Paid Subscription Email Notification field in the Options.
CVSS Score
4.8
EPSS Score
0.003
Published
2020-09-03
The Admin CP in vBulletin 5.6.3 allows XSS via a Rank Type to User Rank Manager.
CVSS Score
4.8
EPSS Score
0.002
Published
2020-09-03
Directory traversal vulnerability in vbseo.php in Crawlability vBSEO plugin 3.1.0 for vBulletin allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the vbseourl parameter.
CVSS Score
6.8
EPSS Score
0.012
Published
2010-03-23
Page 2