Vulnerabilities (CVE)

Filtered by vendor Fluxbb Subscribe
Filtered by product Fluxbb
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43677 1 Fluxbb 1 Fluxbb 2022-01-08 4.3 MEDIUM 6.1 MEDIUM
Fluxbb v1.4.12 is affected by a Cross Site Scripting (XSS) vulnerability.
CVE-2020-35240 1 Fluxbb 1 Fluxbb 2021-07-21 3.5 LOW 4.8 MEDIUM
FluxBB 1.5.11 is affected by cross-site scripting (XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in "Blog Content" and each time any user will visit the blog, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.