Summary
The remote web server contains a PHP application that is affected by several flaws.
Description :
According to its version number, the remote version of this software is vulnerable to Javascript injection issues using 'url' bbcode tags and, if HTML tags are enabled, HTML more generally. This may allow an attacker to inject hostile Javascript into the forum system, to steal cookie credentials or misrepresent site content. When the form is submitted the malicious Javascript will be incorporated into dynamically generated content.
Solution
Upgrade to phpBB version 2.0.19 or later.
References
Updated on 2017-03-28
