MEDIUM 5.1 NVD
CVE-2016-20098
Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subr
Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki fields into popup HTML without encoding. Attackers who can edit the toolbox wiki page can plant JavaScript in fields like pmsubject, header, or reason titles to act with moderators' Reddit sessions.
References
- https://github.com/toolbox-team/reddit-moderator-toolbox
- https://github.com/toolbox-team/reddit-moderator-toolbox/commit/26f45ba21d84cecb92b1a82089
- https://www.vulncheck.com/advisories/moderator-toolbox-before-4.0.14-stored-xss-via-remova
This medium severity vulnerability with a CVSS score of 5.1 was published on 2026-10-09 via NVD.
vulnfeed aggregates 13827 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.