CVE-2024-30950

A stored cross-site scripting XSS vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php...

CVE-2024-30951

FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the chpos parameter at /adm/admsmiley.php...

CVE-2024-30950

CVE-2024-30950 affects FUDforum version 3.1.3. The vulnerability is described as a stored cross-site scripting (XSS) issue caused by a crafted payload injected into the SQL statements field under the API endpoint "/adm/admsql.php". Impact: attackers can execute arbitrary web scripts or HTML in th...

CVE-2024-30951

CVE-2024-30951 affects FUDforum v3.1.3 with a reflected XSS via the chpos parameter in /adm/admsmiley.php. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) as a reflected XSS in that endpoint. The provided connected documents clearly identify the affected product/ver...