Vulnerabilities > Vanillaforums > Vanilla Forums > 2.0.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2011-02-08 | CVE-2011-0909 | Cross-Site Scripting vulnerability in Vanillaforums Vanilla Cross-site scripting (XSS) vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to inject arbitrary web script or HTML via the p parameter to an unspecified component, a different vulnerability than CVE-2011-0526. | 4.3 |
| 2011-02-08 | CVE-2011-0908 | Improper Input Validation vulnerability in Vanillaforums Vanilla Open redirect vulnerability in Vanilla Forums before 2.0.17.6 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Target parameter to an unspecified component, a different vulnerability than CVE-2011-0526. | 5.8 |
| 2011-02-08 | CVE-2011-0526 | Cross-Site Scripting vulnerability in Vanillaforums Vanilla Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script or HTML via the Target parameter in a /entry/signin action. | 4.3 |