CVE-2009-5159: Invisioncommunity Invision Power Board

Medium severity, CVSS 6.1. EPSS: 3.5% chance of exploitation in the next 30 days.

Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.

Affected products

• Invisioncommunity Invision Power Board: from 2.0, up to and including 3.0.4
• Microsoft Internet Explorer: version 5 only

Published 2020-03-13. Last modified 2026-06-16.