← Back

CVE-2021-29399

nvd nist
Published: Apr 19, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16.

Affected (3)

Products: Xmbforum2: Xmb
Xmbforum2
1 product
Xmb
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Xmb
From 1.9.1 to 1.9.11.16
Running on/withPlatform Versions
Php
Php
Version 5.0.0
Configuration B
2 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Xmbforum2
Xmb
From 1.9.11 to 1.9.11.16
Xmb
From 1.9.12 to 1.9.12.03
Running on/withPlatform Versions
Php
Php
Version 7.0.0
Php
Php
Version 8.0.0

Related CWEs

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (6)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.