Medium
CVSS 5.0
Overview
xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter.
xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote a...
xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter.
This vulnerability is rated 🟡 MEDIUM.
Recommended actions: