Test ID:	1.3.6.1.4.1.25623.1.0.106535
Category:	Web application abuses
Title:	b2evolution Multiple XSS Vulnerabilities
Summary:	b2evolution is prone to multiple cross-site scripting vulnerabilities.
Description:	Summary: b2evolution is prone to multiple cross-site scripting vulnerabilities. Vulnerability Insight: b2evolution is prone to multiple cross-site scripting vulnerabilities: - Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function. (CVE-2016-7149) - Cross-site scripting (XSS) vulnerability allows remote authenticated users to inject arbitrary web script or HTML via the site name. (CVE-2016-7150) Affected Software/OS: b2evolution 6.7.6 and prior. Solution: Upgrade to version 6.7.7 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7149 BugTraq ID: 92967 http://www.securityfocus.com/bid/92967 http://www.openwall.com/lists/oss-security/2016/09/12/1 http://www.openwall.com/lists/oss-security/2016/09/15/4 Common Vulnerability Exposure (CVE) ID: CVE-2016-7150
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.