Vanilla

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Vanilla records in CISA KEV

No Vanilla vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Vanilla 19 records HIGH Vanilla Forums 7 records LOW Latestcomment 1 record LOW

Records

1 record in Latestcomment · all components

TI-2012-05273 CVE-2012-6555 · GHSA-vjc8-w968-pc2v

Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla…

LOW 24

Cross-site scripting (XSS) vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02074 Published 2013-05-23 No fix listed CWE-79

Open these records in search →

Critical	2
High	6
Medium	15
Low	2
No CVSS	0