Vanilla vulnerabilities

3 vulnerabilities

Known vulnerabilities in Vanilla products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
6.1CVE-2011-1009vanillavanilla forums+1
EPSS score
0.80%
Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter.7.5CVE-2011-3613vanillavanilla forums+1
EPSS score
1.73%
An issue exists in Vanilla Forums before 2.0.17.9 due to the way cookies are handled.9.8CVE-2011-3614vanillavanilla forums+1
EPSS score
1.96%
An Access Control vulnerability exists in the Facebook, Twitter, and Embedded plugins in Vanilla Forums before 2.0.17.9.