CVE-2021-29399: XMBFORUM2 Xmb

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16.

Affected products

• XMBFORUM2 Xmb: from 1.9.1, before 1.9.11.16 (fixed in 1.9.11.16); from 1.9.11, before 1.9.11.16 (fixed in 1.9.11.16); from 1.9.12, before 1.9.12.03 (fixed in 1.9.12.03)

Published 2021-04-19. Last modified 2026-06-17.