Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-06-19	CVE-2018-12580	Cross-site Scripting vulnerability in Dragonbyte-Tech Vbsecurity 3.3.0 library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature. network low complexity dragonbyte-tech CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.