CVE-2019-8278: Invisioncommunity Invision Power Board

Medium severity, CVSS 6.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.

Affected products

• Invisioncommunity Invision Power Board: from 3.3.1, up to and including 3.4.8

Published 2019-03-02. Last modified 2026-06-17.