CVE-2019-25093
Description
A vulnerability, which was classified as problematic, was found in dragonexpert Recent Threads on Index. Affected is the function recentthread_list_threads of the file inc/plugins/recentthreads/hooks.php of the component Setting Handler. The manipulation of the argument recentthread_forumskip leads to cross site scripting. It is possible to launch the attack remotely. The patch is identified as 051465d807a8fcc6a8b0f4bcbb19299672399f48. It is recommended to apply a patch to fix this issue. VDB-217182 is the identifier assigned to this vulnerability.
How to fix
- recent_threads_on_index_project recent_threads_on_index2019-02-06 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| recent_threads_on_index_project recent_threads_on_index | v < 2019-02-06 | 2019-02-06 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.