TI-2010-00899 CVE-2010-0938 · GHSA-m563-p62x-fh3wCross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows…Priority LOW 22Cross-site scripting (XSS) vulnerability in todooforum.php in Todoo Forum 2.0 allows remote attackers to inject arbitrary web script or HTML via the id_forum parameter in a post action.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01075 · Published 2010-03-08 · No fix listed CWE-79