CVE-2021-32924

Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the…

published June 1, 2021

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder::previewBlock method interacts unsafely with the IPS\_Theme::runProcessFunction method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19908 · 97.4th percentile
Published
2021-06-01T17:47Z
EPSS history
Timeline
  • 01 JUN 17:47Z
    Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the…
    cvelistv5