Description phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag. Remediation References CVE-2011-0544 Related Vulnerabilities phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-0791) WordPress Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Vulnerability (CVE-2020-4049) WordPress Plugin Uncanny Toolkit for LearnDash Cross-Site Request Forgery (3.6.3) WordPress Plugin WordPress Custom Settings Cross-Site Scripting (1.0) WordPress Plugin Advanced Shipment Tracking for WooCommerce Security Bypass (3.2.6) Severity Medium Classification CVE-2011-0544 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities