wpforo_forum 漏洞

中危CVE-2023-23092023/07/24

wpForo Forum <= 2.1.8 - Cross-Site Scripting

The wpForo Forum plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘wpforo_debug’ function in versions up to, and including, 2.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

wpforo_forumPoC 已收录

CVSS6.1EPSS 7.4%

中危CVE-2021-244062021/07/06

WordPress wpForo Forum < 1.9.7 - Open Redirect

WordPress wpForo Forum < 1.9.7 is susceptible to an open redirect vulnerability because the plugin did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login.

wpforo_forumPoC 已收录

CVSS6.1EPSS 8.5%

中危CVE-2018-117092018/06/04

WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting

WordPress wpForo Forum plugin before 1.4.12 for WordPress allows unauthenticated reflected cross-site scripting via the URI.

wpforo_forumPoC 已收录

CVSS6.1EPSS 6.8%

wpforo_forum

关联漏洞

wpForo Forum <= 2.1.8 - Cross-Site Scripting

WordPress wpForo Forum < 1.9.7 - Open Redirect

WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting