Multiple cross-site scripting (XSS) vulnerabilities pm_popup.php in MKPortal 1.1 Rc1 and previous versions, as used with vBulletin 3.5.4 and previous versions, allow remote malicious users to inject arbitrary web script or HTML via the (1) u1, (2) m1, (3) m2, (4) m3, (5) m4 parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mkportal mkportal 1.1_rc1 |