CVE-2008-1359
Invision Power Board <2.3.4 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before 2008-03-13 allows remote attackers to inject arbitrary web script or HTML via nested BBCodes, a different vector than CVE-2008-0913.
References (4)
Scores
EPSS
0.0024
EPSS Percentile
47.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (1)
invision_power_services/invision_power_board
< 2.3.4
Timeline
Published
Mar 17, 2008
Tracked Since
Feb 18, 2026