Vulnerabilities > Fudforum > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-06-06 CVE-2022-30861 Cross-site Scripting vulnerability in Fudforum 3.1.2
FUDforum 3.1.2 is vulnerable to Stored XSS via Forum Name field in Forum Manager Feature.
network
low complexity
fudforum CWE-79
4.8
2022-06-06 CVE-2022-30863 Cross-site Scripting vulnerability in Fudforum 3.1.2
FUDForum 3.1.2 is vulnerable to Cross Site Scripting (XSS) via page_title param in Page Manager in the Admin Control Panel.
network
low complexity
fudforum CWE-79
4.8
2022-05-06 CVE-2022-28545 Cross-site Scripting vulnerability in Fudforum 3.1.1
FUDforum 3.1.1 is vulnerable to Stored XSS.
network
low complexity
fudforum CWE-79
5.4
2021-03-19 CVE-2021-27520 Cross-site Scripting vulnerability in Fudforum 3.1.0
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "author" parameter.
network
low complexity
fudforum CWE-79
6.1
2021-03-19 CVE-2021-27519 Cross-site Scripting vulnerability in Fudforum 3.1.0
A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the "srch" parameter.
network
low complexity
fudforum CWE-79
6.1