CVE-2015-2989: Lemon-S PHP Twit Bbs

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php in LEMON-S PHP Twit BBS allows remote attackers to inject arbitrary web script or HTML via the imagetitle parameter.

Affected products

• Lemon-S PHP Twit Bbs: affected versions not specified

Published 2015-09-07. Last modified 2026-06-17.