Vulnerabilidades de Forocoches Forocoches comments editor (CVE)

Display of information in the Forocoches comments editor

An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain unauthorised user information by inserting an image containing a malicious external URL into a comment. When a victim views the discussion thread, thei…