FluxBB 1.5.11 Cross Site Scripting

FluxBB version 1.5.11 suffers from a persistent cross site scripting vulnerability. Exploit Title: FluxBB 1.5.11 Stored xss Date: 3/8/2025 Exploit Author: Chokri Hammedi Vendor Homepage: www.fluxbb.org Software Link: https://www.softaculous.com/apps/forums/FluxBB Version: FluxBB 1.5.11 Tested on:...

Fluxbb Cross-Site Scripting Vulnerability (CNVD-2022-03216)

Fluxbb is a Php-based forum system from the Fluxbb organization. fluxbb has a cross-site scripting vulnerability in v1.4.12, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on the client...

CVE-2021-43677

Fluxbb v1.4.12 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2021-43677

Fluxbb v1.4.12 is affected by a Cross Site Scripting XSS vulnerability...

Cross site scripting

Fluxbb v1.4.12 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2021-43677

Fluxbb v1.4.12 is affected by a Cross Site Scripting XSS vulnerability...

CVE-2021-43677

CVE-2021-43677 affects FluxBB v1.4.12 with a Cross-Site Scripting (XSS) vulnerability. Root cause: lack of data validation and filtering of user-supplied input leading to script execution in the browser. Public reports across CNVD/CNNVD/Red Hat/NVD entries confirm the issue is client-side JavaScr...

Fluxbb 跨站脚本漏洞

Fluxbb is a Php-based forum system from the Fluxbb organization. fluxbb has a cross-site scripting vulnerability in v1.4.12, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploit the vulnerability to execute JavaScript code on the client...

Fluxbb Denial of Service Vulnerability

FluxBB is an open source forum application. A denial of service vulnerability exists in Fluxbb 1.5.11. The vulnerability can be exploited to cause a denial of service by sending a very long password via the user login form to exhaust CPU and memory resources on the server...

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

Code injection

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

CVE-2020-28873

Fluxbb 1.5.11 is affected by a denial of service DoS vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the server...

CVE-2020-28873

CVE-2020-28873 affects FluxBB 1.5.11. A DoS vulnerability arises when an extremely long password is submitted to the user login form, causing CPU and memory exhaustion during password hashing. The available connected documents confirm the condition and impact but do not provide any patch versions...

Fluxbb 安全漏洞

FluxBB is an open source forum application. A denial of service vulnerability exists in Fluxbb 1.5.11. The vulnerability can be exploited to cause a denial of service by sending a very long password via the user login form to exhaust CPU and memory resources on the server...

FluxBB Cross-Site Scripting Vulnerability

FluxBB is an open source forum application. A cross-site scripting vulnerability exists in the "Blog Content" component of FluxBB 1.5.11. An attacker can exploit this vulnerability to steal cookies...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

CVE-2020-35240

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

Cross site scripting

FluxBB 1.5.11 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the...

CVE-2020-35240

CVE-2020-35240 affects FluxBB 1.5.11 with a cross-site scripting (XSS) vulnerability in the Blog Content component. The flaw allows an attacker to inject an XSS payload in Blog Content, causing the payload to execute for visitors and potentially enabling cookie theft. The provided connected docum...