sorry my english bad.
step by step.
1-) new post
2-) content: [code]<script>alert(document.cookie);</script>
3-) other user likes this post.
4-) go owner post member profile and go Likes Received link. wow alert xss.
This is a discussion on Likes High Bug. Run XSS within the Bug Reporting forums, part of the vBSEO SEO Plugin category; sorry my english bad. step by step. 1-) new post 2-) content: [code]<script>alert(document.cookie);</script> 3-) other user likes this post. 4-) ...
sorry my english bad.
step by step.
1-) new post
2-) content: [code]<script>alert(document.cookie);</script>
3-) other user likes this post.
4-) go owner post member profile and go Likes Received link. wow alert xss.
2-) content:// fix.Code:<script>alert(document.cookie);</script>
Hello,
I cannot reproduce the issue reported above.
Also, currently there are no vBSEO licenses assigned to your account, please PM me your forums URL/order transaction ID to correct that.
Oleg Ignatiuk / Crawlability Inc.
Security vbulletin - Patch Level for all supported versions released!
Unveiling the NEW vBSEO Sitemap Generator 3.0. - available NOW for vBSEO Customers!