Lucene search
+L

13 matches found

CNNVD
CNNVD
•added 2026/02/28 12:00 a.m.•24 views

WordPress plugin wpForo Forum 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The wpFo...

5.5CVSS5.6AI score0.00325EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/28 12:00 a.m.•2 views

CVE-2026-28561: Improper Neutralization of Input During Web Page Generation

wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without output escaping across multiple theme template files. On multisite installations or with a compromised admin account,...

5.5CVSS5.8AI score0.00325EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/28 12:00 a.m.•22 views

PT-2026-22482

Name of the Vulnerable Software and Affected Versions wpForo Forum version 2.4.14 Description The software contains a stored cross-site scripting issue. This allows administrators to inject persistent JavaScript through forum description fields. The injected script executes when any user views th...

5.5CVSS5.7AI score0.00325EPSS
SaveExploits0References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2006-5188

Malware in sbrugna...

5.1CVSS6.4AI score0.00861EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/17 12:18 a.m.•30 views

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

5.4CVSS6AI score0.00251EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 6:15 p.m.•29 views

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

5.4CVSS0.00251EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/15 6:15 p.m.•15 views

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

5.4CVSS5.8AI score0.00251EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•3 views

CVE-2025-44110: Improper Neutralization of Input During Web Page Generation

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

5.4CVSS5.8AI score0.00251EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/15 12:00 a.m.•10 views

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

5.3AI score0.00251EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 12:00 a.m.•33 views

CVE-2025-44110

FluxBB 1.5.11 is vulnerable to Cross Site Scripting XSS in via the Forum Description Field in adminforums.php...

0.00251EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/15 12:00 a.m.•62 views

CVE-2025-44110

FluxBB version 1.5.11 is vulnerable to a Cross Site Scripting (XSS) flaw located in the Forum Description Field within the admin_forums.php page. This vulnerability allows for the potential execution of malicious scripts in the context of the user's browser. To remediate this, users should update...

5.4CVSS5.8AI score0.00251EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•26 views

Fluxbb 安全漏洞

Fluxbb is a Php-based forum system organized by Fluxbb. A security vulnerability exists in Fluxbb version 1.5.11, which stems from the Forum Description Field in adminforums.php being vulnerable to cross-site scripting attacks...

5.4CVSS6AI score0.00251EPSS
SaveExploits1References1
NVD
NVD
•added 2013/07/31 1:20 p.m.•20 views

CVE-2013-5020

Multiple cross-site scripting XSS vulnerabilities in bbadmin.php in MiniBB before 3.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 forumname, 2 forumgroup, 3 forumicon, or 4 forumdesc parameter. NOTE: the whatus vector is already covered by CVE-2008-2066...

4.3CVSS5.7AI score0.01862EPSS
SaveExploits2References6
Rows per page
Query Builder