Nbbg · Nbbg · CVE-2009-2217
**Name of the Vulnerable Software and Affected Versions**
NBBG versions prior to 1.4.2
**Description**
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag.
**Recommendations**
For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue.