Known vulnerabilities in JForum

Vendor: jforum.net
Software: JForum
Software CPE: cpe:2.3:a:jforum_net:jforum:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 4
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JForum JForum is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17727 - Exposure of sensitive information to an unauthorized actor
CVE-2019-7550
CWE-200 Low
Available
No
- 16.02.2019 SB2019021602
#VU42197 - Cross-Site Request Forgery (CSRF)
CVE-2013-7209
CWE-352 Medium
Available
No
- 30.12.2013 SB2013123001
#VU42541 - Improper input validation
CVE-2012-5338
CWE-20 Medium
No
No
- 23.09.2013 SB2013092302
#VU43059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-5337
CWE-79 Low
Available
No
- 24.02.2013 SB2013022402