CVE-2009-2172
dream radio and tv player addon for vbulletin: no CVSS score yet. EPSS 1.2% chance of exploitation in the next 30 days.
Cross-site scripting (XSS) vulnerability in forum/radioandtv.php in the Radio and TV Player addon for vBulletin allows remote registered users to inject arbitrary web script or HTML via the station parameter.
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dream:radio_and_tv_player_addon_for_vbulletin