CVE-2011-1150

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

bbPress 1.0.2 Cross Site Request Forgery

: Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com admin Key Master Hotmail: Free, trusted and rich email service...