CVE-2008-4076: Tor World Interactive Bbs

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in (1) Tor World Tor Board 1.3 and earlier, (2) Topics BBS 1.11 and earlier, (3) Simple BBS 1.86 and earlier, and (4) Interactive BBS 1.57 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-0917.

Affected products

• Tor World Interactive Bbs: up to and including 1.57
• Tor World Simple Bbs: up to and including 1.86; version 1.3 only
• Tor World Topics Bbs: up to and including 1.11
• Tor World Tor Board: up to and including 1.3; version 1.1 only

Published 2008-09-15. Last modified 2026-06-16.