CVE-2021-39249

MEDIUM · CVSS 6.1 EPSS 0.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-08-17 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-39249

Severity

MEDIUM

CVSS

6.1

EPSS

0.77%

Original NVD Description

Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force attack against the PHP mt_rand function.