Known vulnerabilities in JForum
Vendor:
jforum.net
Software:
JForum
Software CPE:
cpe:2.3:a:jforum_net:jforum:*:*:*:*:*:*:*:*
Total vulnerabilities:
4
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU17727 - Exposure of sensitive information to an unauthorized actor CVE-2019-7550 |
CWE-200 | Low | - | 16.02.2019 |
SB2019021602 |
||
| #VU42197 - Cross-Site Request Forgery (CSRF) CVE-2013-7209 |
CWE-352 | Medium | - | 30.12.2013 |
SB2013123001 |
||
| #VU42541 - Improper input validation CVE-2012-5338 |
CWE-20 | Medium | - | 23.09.2013 |
SB2013092302 |
||
| #VU43059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2012-5337 |
CWE-79 | Low | - | 24.02.2013 |
SB2013022402 |