CVE-2014-2021 | vBulletin up to 5.0.5 XMLRPC API /apilog.php cross site scripting (EDB-40114 / ID 11663)
A vulnerability classified as problematic was found in vBulletin up to 5.0.5. Affected by this vulnerability is an unknown functionality of the file /apilog.php of the component XMLRPC API. The manipulation leads to cross site scripting.
This vulnerability is known as CVE-2014-2021. The attack can be launched remotely. Furthermore, there is an exploit available.