Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Learning System 6 Blackboard Learning and Community Portal Suite 6.2.3.23 and Blackboard Vista 4 allow remote attackers to inject arbitrary Javascript VBScript or HTML via (1) data (2) vbscript and (3) malformed javascript URIs in various HTML tags when posting to the Discussion Board.