CVE-2021-46030

Name of the Vulnerable Software and Affected Versions JavaQuarkBBS versions prior to v3

Description The issue is related to a Cross Site Scripting attack (XSS) that occurs when specific statements are entered into the background tag management module. These statements are stored in the database and can attack the next victim who accesses the tag module.

Recommendations For JavaQuarkBBS versions prior to v3, consider disabling the background tag management module until a patch is available to prevent the storage and execution of malicious scripts. Restrict access to the tag module to minimize the risk of exploitation. Avoid using the background tag management module until the issue is resolved.