vBulletin Cross-Site Scripting Vulnerability in Login Component

A cross-site scripting vulnerability has been identified in vBulletin versions 6.x, specifically within the Login component. This issue allows for remote exploitation by manipulating an unknown function, leading to the injection of malicious scripts. The details of the exploit have been made public, although VulDB is withholding certain information to prevent easier exploitation.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.