PT-2020-7094

Name of the Vulnerable Software and Affected Versions bbPress versions 1.0.0 through 1.0.2 Description The issue concerns a cross-site scripting XSS flaw in the /bb-login.php URL, specifically via the re parameter. This allows for potential malicious script injection. No information is provided...

CVE-2011-1150: Improper Neutralization of Input During Web Page Generation

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter...

CVE-2007-3243: Undefined Security Weakness

Cross-site scripting XSS vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary web script or HTML via the re parameter. NOTE: exploitation may require forcing the client to send a certain Referer header...