TI-2012-05386 CVE-2012-6670 · GHSA-896r-j9rp-2fjqMultiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies…Priority LOW 31Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in (1…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01669 · Published 2018-01-11 · No fix listed CWE-79