Re: Simple Machines Forum Cross-Site Scripting Vulnerabilities

From: <dev_at_null.org>
Date: 27 Jan 2008 04:52:22 -0000

('binary' encoding is not supported, stored as-is) Please note that the URL provided is not a standard SMF URL. This requires that a portal be installed, though I am unclear as to which one.

SMF, as a standalone package, has undertaken steps to eradicate XSS injection vulnerabilities. SMF cannot be held accountable for mod packages that aren't kept current or secured.
Received on Jan 28 2008