Vanillaforums vulnerabilities, page 2

25 vulnerabilities

Known vulnerabilities in Vanillaforums products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

6.1CVE-2010-4266vanillaforumsvanilla_forums
EPSS score
0.58%
It was found in vanilla forums before 2.0.10 a potential linkbait vulnerability in dispatcher.6.1CVE-2010-4264vanillaforumsvanilla_forums
EPSS score
0.66%
It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side.8CVE-2017-1000432vanillaforumsvanilla_forums
EPSS score
1.65%
Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access4CVE-2019-9889vanillaforumsvanilla
EPSS score
2.38%
In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type value, leading to Directory Traversal with File Inclusion. An attacker can leverage this vulnerability to execute code under the context of the web server.5.4CVE-2019-8279kaspersky labvanilla forums+1
EPSS score
0.81%
Multiple stored XSS in Vanilla Forums before 2.5 allow remote attackers to inject arbitrary JavaScript code into any message on forum.