CVE-2024-30951

FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the chpos parameter at /adm/admsmiley.php...

CVE-2024-30951

FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the chpos parameter at /adm/admsmiley.php...

CVE-2024-30951: Improper Neutralization of Input During Web Page Generation

FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the chpos parameter at /adm/admsmiley.php...

CVE-2024-30951

FUDforum v3.1.3 is vulnerable to a reflected cross-site scripting (XSS) vulnerability. This flaw occurs when the application fails to properly neutralize input provided via the chpos parameter at the /adm/admsmiley.php API endpoint. While the vulnerability allows for potential script execution in...

FUDForum security vulnerabilities

FUDForum is a PHP-based open source forum software. A security vulnerability exists in FUDForum version v3.1.3, which originates from a Reflected Cross Site Scripting XSS vulnerability in the chpos parameter in /adm/admsmiley.php...

PT-2024-23688 · Fudforum · Fudforum

Name of the Vulnerable Software and Affected Versions: FUDforum version 3.1.3 Description: A reflected cross-site scripting XSS issue was discovered in FUDforum. The vulnerability is exploited via the chpos parameter at the "/adm/admsmiley.php" API endpoint. Recommendations: For FUDforum version...