Simple Machines Forum@* Security Vulnerabilities and Issues — Simple Machines Forum@* CVE List

Lucene search

SimplemachinesSimple Machines Forum*

2 matches found

CVE•added 2020/01/22 6:15 a.m.•100 views

CVE-2019-12490

An issue was discovered in Simple Machines Forum (SMF) before 2.0.16. Reverse tabnabbing can occur because of use of _blank for external links.

6.5CVSS6.4AI score0.00362EPSS

CVE•added 2018/04/24 2:29 a.m.•46 views

CVE-2018-10305

The MessageSearch2 function in PersonalMessage.php in Simple Machines Forum (SMF) before 2.0.15 does not properly use the possible_users variable in a query, which might allow attackers to bypass intended access restrictions.

9.8CVSS9.3AI score0.00422EPSS