Codoforum@4.8.3 Security Vulnerabilities and Issues — Codoforum@4.8.3 CVE List

Lucene search

CodologicCodoforum4.8.3

4 matches found

CVE•added 2020/01/07 8:15 p.m.•79 views

CVE-2020-5842

Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page.

6.1CVSS5.9AI score0.01819EPSS

CVE•added 2020/01/05 11:15 p.m.•66 views

CVE-2020-5305

Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen.

4.8CVSS4.8AI score0.00412EPSS

CVE•added 2020/01/05 11:15 p.m.•61 views

CVE-2020-5306

Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content.

4.8CVSS4.8AI score0.0052EPSS

CVE•added 2020/01/07 1:15 p.m.•39 views

CVE-2020-5843

Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.

4.8CVSS4.8AI score0.00412EPSS