CVE-2018-17571: Vanillaforums Vanilla

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Vanilla before 2.6.1 allows XSS via the email field of a profile.

Affected products

• Vanillaforums Vanilla: before 2.6.1 (fixed in 2.6.1)

Published 2018-09-28. Last modified 2026-06-17.