PatchTheCVE: dragonbyte-techhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-12580: library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBuhttps://patchthecve.com/cve/CVE-2018-12580.htmlhttps://patchthecve.com/cve/CVE-2018-12580.htmlWed, 17 Jun 2026 01:38:00 +0000MEDIUM 6.1: library/DBTech/Security/Action/Sessions.php in DragonByte vBSecurity 3.x through 3.3.0 for vBulletin 3 and vBulletin 4 allows self-XSS via $session['user_agent'] in the "Login Sessions" feature.CVE-2012-6682: Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies https://patchthecve.com/cve/CVE-2012-6682.htmlhttps://patchthecve.com/cve/CVE-2012-6682.htmlTue, 16 Jun 2026 23:48:35 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloads module 1.3.2 and earlier for vBulletin allows remote attackers to inject arbitrary web script or HTML via the mirrors[] parameter.CVE-2012-6671: Multiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte Technologies Forumonhttps://patchthecve.com/cve/CVE-2012-6671.htmlhttps://patchthecve.com/cve/CVE-2012-6671.htmlTue, 16 Jun 2026 23:48:35 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG module before 1.0.8 for vBulletin when creating a new monster, allow remote attackers to inject arbitrary web script or HTML via the (1) monster[title] or (2) monster[description] paramCVE-2012-6670: Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.https://patchthecve.com/cve/CVE-2012-6670.htmlhttps://patchthecve.com/cve/CVE-2012-6670.htmlTue, 16 Jun 2026 23:48:35 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the reason parameter in (1) actions/nominatemedal.php or (2) actions/requestmedal.php.CVE-2012-6668: Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShouhttps://patchthecve.com/cve/CVE-2012-6668.htmlhttps://patchthecve.com/cve/CVE-2012-6668.htmlTue, 16 Jun 2026 23:48:35 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module before 6.0.6 for vBulletin allow remote attackers to inject arbitrary web script or HTML via the (1) reportreason parameter in actions/doreport.php or (2) modnotes parameter in actiCVE-2012-6667: Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletihttps://patchthecve.com/cve/CVE-2012-6667.htmlhttps://patchthecve.com/cve/CVE-2012-6667.htmlTue, 16 Jun 2026 23:48:35 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to inject arbitrary web script or HTML via the shout parameter in a shout action.