CVE-2020-25119: vBulletin

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

The Admin CP in vBulletin 5.6.3 allows XSS via a Title of a Child Help Item in the Login/Logoff part of the User Manual.

Affected products

• vBulletin vBulletin: version 5.6.3 only

Published 2020-09-03. Last modified 2026-06-17.